Access-Control
- Improper Authorization in Cisco NDFC REST API
A REST API endpoint in Cisco Nexus Dashboard and NDFC lets an authenticated, low-privileged attacker view sensitive information and modify certain files.
- Improper Authorization Information Disclosure in Cisco NDFC REST API
A specific REST API endpoint in Cisco NDFC enforces authorization improperly, letting an authenticated, low-privileged attacker read sensitive information.
- Missing Authorization File Read/Write in Cisco NDFC REST API
A REST API endpoint in Cisco NDFC lacks authorization checks, letting an authenticated, low-privileged attacker read or write files on the device.
- Missing Authorization File Upload/Delete in Cisco NDFC REST API
A specific REST API endpoint in Cisco NDFC lacks authorization checks, letting an authenticated, low-privileged attacker upload or delete files in certain containers.
- Improper Access Control in SourceCodester IMS (Password Handler)
The Password Handler (edit_update.php) in SourceCodester Inventory Management System 1.0 trusts a client-supplied user_id, allowing a user to modify an account other than their …