Cookie Consent by Free Privacy Policy Generator 📌 [PRODSECBUG-2307] Insufficient enforcement of user access controls could lead to unauthorized environment configuration changes - CVE-2019-7904
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 [PRODSECBUG-2307] Insufficient enforcement of user access controls could lead to unauthorized environment configuration changes - CVE-2019-7904


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: portal.patchman.co

Insufficient enforcement of user access controls could be abused by a low-privileged user to make unauthorized environment configuration changes, such as removing security controls.

Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3

This vulnerability affects the following application versions:

  • Magento 2.1.0
  • Magento 2.1.1
  • Magento 2.1.2
  • Magento 2.1.3
  • Magento 2.1.4
  • Magento 2.1.5
  • Magento 2.1.6
  • Magento 2.1.7
  • Magento 2.1.8
  • Magento 2.1.9
  • Magento 2.1.10
  • Magento 2.1.11
  • Magento 2.1.12
  • Magento 2.1.13
  • Magento 2.1.14
  • Magento 2.1.15
  • Magento 2.1.16
  • Magento 2.1.17
  • Magento 2.2.0
  • Magento 2.2.1
  • Magento 2.2.2
  • Magento 2.2.3
  • Magento 2.2.4
  • Magento 2.2.5
  • Magento 2.2.6
  • Magento 2.2.7
  • Magento 2.2.8
  • Magento 2.3.0
  • Magento 2.3.1
...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 [PRODSECBUG-2162] Unauthorized data control due to a bypass of authentication controls for a customer using a web API endpoint


📈 44.89 Punkte

📌 Bugtraq: [security bulletin] HPSBUX03574 rev.1 - HPE HP-UX CIFS-Server (Samba), Remote Access Restriction Bypass, Authentication bypass, Denial of Service (DoS), Unauthorized Access to Files, Access Restriction Bypass, Unauthorized Information Disclo


📈 43.04 Punkte

📌 Bugtraq: [security bulletin] HPSBUX03574 rev.1 - HPE HP-UX CIFS-Server (Samba), Remote Access Restriction Bypass, Authentication bypass, Denial of Service (DoS), Unauthorized Access to Files, Access Restriction Bypass, Unauthorized Information Disclo


📈 43.04 Punkte

📌 [PRODSECBUG-2156] Remote Code Execution through Unauthorized File Upload


📈 33.12 Punkte

📌 WordPress Royal Elementor 1.3.59 XSS / CSRF / Insufficient Access Controls


📈 32.01 Punkte

📌 Catching Configuration Changes that Can Lead to Data Exposure


📈 29.95 Punkte

📌 Two flaws that could lead to Potential lead to RCE fixed by OpenSSL project team


📈 28.85 Punkte

📌 Bugtraq: [security bulletin] HPESBHF03741 rev.1 - HPE Network products including Comware 7, IMC, and VCX running OpenSSL, Local Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Disclosure of Information


📈 28.54 Punkte

📌 Bugtraq: [security bulletin] HPESBMU03806 rev.1 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation


📈 28.54 Punkte

📌 ZTE ZXDSL 831 Unauthorized Configuration Access Bypass


📈 28.04 Punkte

📌 ZTE ZXDSL 831 Unauthorized Configuration Access Bypass


📈 28.04 Punkte

📌 [PRODSECBUG-2289] Arbitrary code execution in the advanced admin logging configuration


📈 27.79 Punkte

📌 [PRODSECBUG-2273] Arbitrary code execution due to unsafe handling of a malicious product attribute configuration


📈 27.79 Punkte

📌 [PRODSECBUG-2028] Stored cross-site scripting vulnerability in the Admin **Stores** > **Attributes** > **Product **configuration area


📈 27.79 Punkte

📌 Configuration as Code Plugin up to 1.24 on Jenkins Configuration Import Environment Variable information disclosure


📈 27.52 Punkte

📌 NordVPN: Unauthorized User Can Delete Any User Account


📈 25.87 Punkte

📌 Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access


📈 25.51 Punkte

📌 Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access


📈 25.51 Punkte

📌 Frost Bank Detects Unauthorized Access that Could Have Exposed Check Images


📈 25.51 Punkte

📌 XZ Struck By Malicious Code That Could Allow Unauthorized Remote System Access


📈 25.51 Punkte

📌 Stops Core Theme And Plugin Updates < 8.0.5 - Insufficient Restrictions on Option Changes


📈 25.19 Punkte

📌 Twitter Bug That Enables Third-party apps to get Unauthorized Access to User’s Direct Messages


📈 24.91 Punkte

📌 Dropcontact: IDOR at [https://dropcontact.firstpromote] which allows an UNAUTHORIZED user to ACCESS and EDIT Paypal GMAIL by Changing the ID.


📈 24.91 Punkte

📌 Unauthorized user access in backend module


📈 24.91 Punkte

📌 [PRODSECBUG-2198] SQL Injection vulnerability through an unauthenticated user


📈 24.65 Punkte

📌 [PRODSECBUG-2227] Deletion of SOAP/XML-RPC-User and SOAP/XML-RPC-Role through cross-site request forgery


📈 24.65 Punkte

📌 [PRODSECBUG-2277] SQL injection due to inadequate validation of user input


📈 24.65 Punkte

📌 Suppose you are in a corporate network environment and often times find yourself manually setting/unsetting the HTTP_PROXY environment variable in order to access different hosts. Sounds familiar? In this case, dePAC might help you!


📈 24.12 Punkte

📌 Upcoming iOS Access Restrictions Could Stymie Law Enforcement


📈 24.12 Punkte

📌 Eggheads show how network flaw could lead to NASA crew pod loss. Key word: Could


📈 24.03 Punkte

📌 Bugtraq: [security bulletin] HPSBUX03596 rev.1 - HPE HP-UX running CIFS Server (Samba), Remote Access Restriction Bypass, Unauthorized Access


📈 23.94 Punkte

📌 Bugtraq: [security bulletin] HPSBGN03638 rev.1 - HPE Remote Device Access: Virtual Customer Access System (vCAS) using lighttpd and OpenSSH, Unauthorized Modification of Information, Remote Denial of Service (DoS), Remote Disclosure of Information


📈 23.94 Punkte

📌 Bugtraq: [security bulletin] HPSBGN03645 rev.2 - HPE Helion OpenStack Glance, Remote Access Restriction Bypass, Unauthorized Access


📈 23.94 Punkte

📌 Bugtraq: [security bulletin] HPSBUX03596 rev.1 - HPE HP-UX running CIFS Server (Samba), Remote Access Restriction Bypass, Unauthorized Access


📈 23.94 Punkte

📌 Bugtraq: [security bulletin] HPSBGN03638 rev.1 - HPE Remote Device Access: Virtual Customer Access System (vCAS) using lighttpd and OpenSSH, Unauthorized Modification of Information, Remote Denial of Service (DoS), Remote Disclosure of Information


📈 23.94 Punkte











matomo

Kontakt

24/7 [email protected]

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software