CVE-2024-5619

CRITICAL Year: 2024
CVSS v3 Score
9.6
Critical
Weakness Type
CWE-639
View all →

Vulnerability Description

Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apinizer Management Console: before 2024.05.1.

Related Vulnerabilities

CVE-2019-6716

CRITICAL
CVSS:9.4(Critical)

An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory userna...

CWE-6392019

CVE-2024-5128

CRITICAL
CVSS:9.4(Critical)

An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to and including 1.2.2. This vulnerability allows unauthorized users to view, update,...

CWE-6392024

CVE-2019-12866

CRITICAL
CVSS:9.8(Critical)

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.

CWE-6392019

CVE-2019-13360

CRITICAL
CVSS:9.8(Critical)

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.

CWE-6392019

CVE-2019-15913

CRITICAL
CVSS:9.8(Critical)

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive informat...

CWE-6392019

CVE-2019-9756

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a...

CWE-6392019