CVE-2018-17860

CVSS v3 Score
7.2
High
CVSS v2 Score
6.5
Medium

Vulnerability Description

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

CVSS:7.2(High)

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP...

CVSS:7.2(High)

In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.

CVSS:7.2(High)

In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.

CVSS:7.2(High)

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have b...

CVSS:7.2(High)

There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow ce...

CVSS:7.2(High)

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp.