Skip to main content
Apexward Pulse
4 reportsPriority Medium

Multiple missing authorisation vulnerabilities disclosed

Several vulnerabilities have been disclosed that could allow unauthorised access to systems, posing a risk to organisations using the affected software.

First report Latest

What is going on

  • A missing authorisation vulnerability in Dassault Systèmes DELMIA Apriso was disclosed, potentially allowing privileged access to the application.
  • A separate missing authorisation vulnerability in SonicWall SMA1000 was reported, though no details were provided about its exploitation.
  • A vulnerability in Digiever DS-2105 Pro was disclosed, which could enable command injection through a specific CGI script, with reports of exploitation in the wild.
  • Another missing authorisation vulnerability in SimpleHelp was disclosed, allowing low-privileged users to create API keys with excessive permissions, and CISA has reported exploitation of this issue.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed