Filtered by CWE-275
Filtered by vendor Subscriptions
Total 104 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-4201 2 Katello, Redhat 2 Katello, Satellite 2024-11-21 N/A
Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
CVE-2013-4040 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2024-11-21 N/A
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
CVE-2013-3703 1 Opensuse 1 Open Build Service 2024-11-21 N/A
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.
CVE-2012-5628 1 Gofer Project 1 Gofer 2024-11-21 N/A
gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.