CWE-639 · Authorization Bypass Through User-Controlled Key (page 29)
Page 29 of 29 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7925 | Medium | 4.9 | 2019-08-02 | An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This ca… |
CVE-2019-7890 | High | 7.3 | 2019-08-02 | An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Ma… |
CVE-2019-7872 | Medium | 6.5 | 2019-08-02 | An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to i… |
CVE-2019-7864 | Medium | 5.3 | 2019-08-02 | An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior… |
CVE-2019-7854 | High | 7.5 | 2019-08-02 | An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to una… |
CVE-2019-13605 | High | 8.8 | 2019-07-16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the kno… |
CVE-2019-13360 | Critical | 9.8 | 2019-07-16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid… |
CVE-2018-19584 | High | 7.5 | 2019-07-10 | GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that al… |
CVE-2018-19582 | Medium | 4.3 | 2019-07-10 | GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized us… |
CVE-2018-19575 | Medium | 4.3 | 2019-07-10 | GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue… |
CVE-2019-13337 | High | 7.5 | 2019-07-09 | In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the parameter used by the API)… |
CVE-2019-13461 | High | 7.5 | 2019-07-09 | In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability d… |
CVE-2019-12782 | High | 8.1 | 2019-07-09 | An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at… |
CVE-2019-5966 | Medium | 5.4 | 2019-07-05 | Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the informat… |
CVE-2019-12866 | Critical | 9.8 | 2019-07-03 | An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4… |
CVE-2019-12742 | High | 8.8 | 2019-06-05 | Bludit prior to 3.9.1 allows a non-privileged user to change the password of any account, including admin. This occurs because of bl-kernel/admin/controllers/u… |
CVE-2019-12252 | Medium | 6.5 | 2019-05-21 | In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify… |
CVE-2019-10108 | Medium | 5.4 | 2019-05-15 | An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11… |
CVE-2018-18976 | Medium | 5.3 | 2019-05-06 | An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical informat… |
CVE-2019-9756 | Critical | 9.8 | 2019-04-17 | An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 1… |
CVE-2019-9219 | Low | 3.7 | 2019-04-17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Cont… |
CVE-2019-9170 | Medium | 5.3 | 2019-04-17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Cont… |
CVE-2019-9921 | Medium | 6.5 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a differen… |
CVE-2019-9938 | Medium | 5.3 | 2019-03-22 | The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the applicat… |
CVE-2019-6716 | Critical | 9.4 | 2019-03-21 | An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to e… |
CVE-2018-20405 | Low | 2.7 | 2018-12-23 | BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reaso… |
CVE-2018-16971 | Medium | 4.3 | 2018-09-12 | Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) v… |
CVE-2018-16608 | High | 8.8 | 2018-09-10 | In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1… |
CVE-2018-16704 | Medium | 4.3 | 2018-09-07 | An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to vi… |
CVE-2018-16606 | Medium | 6.5 | 2018-09-06 | In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their author… |
CVE-2018-15833 | Medium | 4.3 | 2018-08-26 | In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to s… |
CVE-2017-3183 | High | 8.8 | 2018-07-24 | Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to pr… |
CVE-2018-1000210 | High | 7.8 | 2018-07-13 | YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deser… |
CVE-2018-10211 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "… |
CVE-2017-0936 | Medium | 5.7 | 2018-03-28 | Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed log… |
CVE-2017-0920 | Medium | 4.3 | 2018-03-22 | GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::Crea… |
CVE-2017-0922 | High | 7.5 | 2018-03-21 | Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an inform… |
CVE-2017-15211 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. |
CVE-2017-15209 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user. |
CVE-2017-15208 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user. |
CVE-2017-15207 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user. |
CVE-2017-15206 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user. |
CVE-2017-15204 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user. |
CVE-2017-15203 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user. |
CVE-2017-15202 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user. |
CVE-2017-15201 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user. |
CVE-2017-15200 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user. |
CVE-2017-15199 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email… |
CVE-2017-15197 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user. |
CVE-2017-15196 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user. |
CVE-2017-15195 | Medium | 4.3 | 2017-10-11 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user. |
CVE-2017-0882 | Medium | 6.3 | 2017-03-28 | Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7… |
CVE-2012-5571 | Medium | 5.4 | 2012-12-18 | A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because… |