Vulnerabilities (CVE)

Filtered by CWE-286
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-21553 1 Dell 1 Powerscale Onefs 2024-11-21 7.2 HIGH 7.3 HIGH
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest.
CVE-2024-52359 2024-11-19 N/A 4.3 MEDIUM
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.
CVE-2024-9312 2024-10-15 N/A 7.5 HIGH
Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.