deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34254
Published: 2023-06-23
Description: The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. In the case, the agent is running with administration privileges, a malicious user could gain high privileges on the computer glpi-agent is running on. A malicious user could also disclose all remote accesses the agent is configured with for remoteinventory task. This vulnerability has been patched in glpi-agent 1.5.
CVSS Score: 7.6 (HIGH)
CWE: CWE-78
References: https://github.com/glpi-project/glpi-agent/blob/dd313ee0914becf74c0e48cb[PII_REDACTED]43b478/Changes#L98; https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-39vc-hxgm-j465; https://github.com/glpi-project/glpi-agent/blob/dd313ee0914becf74c0e48cb[PII_REDACTED]43b478/Changes#L98
CVE: CVE-2023-35154
Published: 2023-06-23
Description: Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-48hp-jvv8-cf62; https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-48hp-jvv8-cf62
CVE: CVE-2023-35163
Published: 2023-06-23
Description: Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For example, a deposit to the collateral bridge for 100USDT that credits a party’s general account on Vega, can be re-processed 50 times resulting in 5000USDT in that party’s general account. This is without depositing any more than the original 100USDT on the bridge. Despite this exploit requiring access to a validator's Vega key, a validator key can be obtained at the small cost of 3000VEGA, the amount needed to announce a new node onto the network.

A patch is available in version 0.71.6. No known workarounds are available, however there are mitigations in place should this vulnerability be exploited. There are monitoring alerts for `mainnet1` in place to identify any issues of this nature including this vulnerability being exploited. The validators have the ability to stop the bridge thus stopping any withdrawals should this vulnerability be exploited.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://github.com/vegaprotocol/vega/commit/56b09bf57af8cd9eca5996252d86f469a3e34c68; https://github.com/vegaprotocol/vega/releases/tag/v0.71.6; https://github.com/vegaprotocol/vega/security/advisories/GHSA-8rc9-vxjh-qjf2
CVE: CVE-2023-35165
Published: 2023-06-23
Description: AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create two roles, `CreationRole` and `default MastersRole`, that have an overly permissive trust policy. 
 
The first, referred to as the `CreationRole`, is used by lambda handlers to create the cluster and deploy Kubernetes resources (e.g `KubernetesManifest`, `HelmChart`, ...) onto it. Users with CDK version higher or equal to 1.62.0 (including v2 users) may be affected.
 
The second, referred to as the `default MastersRole`, is provisioned only if the `mastersRole` property isn't provided and has permissions to execute `kubectl` commands on the cluster. Users with CDK version higher or equal to 1.57.0 (including v2 users) may be affected.

The issue has been fixed in `@aws-cdk/aws-eks` v1.202.0 and `aws-cdk-lib` v2.80.0. These versions no longer use the account root principal. Instead, they restrict the trust policy to the specific roles of lambda handlers that need it. There is no workaround available for CreationRole. To avoid creating the `default MastersRole`, use the `mastersRole` property to explicitly provide a role.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-863
References: https://github.com/aws/aws-cdk/issues/25674; https://github.com/aws/aws-cdk/security/advisories/GHSA-rx28-r23p-2qc3; https://github.com/aws/aws-cdk/issues/25674
CVE: CVE-2023-35169
Published: 2023-06-23
Description: PHP-IMAP is a wrapper for common IMAP communication without the need to have the php-imap module installed / enabled. Prior to version 5.3.0, an unsanitized attachment filename allows any unauthenticated user to leverage a directory traversal vulnerability, which results in a remote code execution vulnerability. Every application that stores attachments with `Attachment::save()` without providing a `$filename` or passing unsanitized user input is affected by this attack.

An attacker can send an email with a malicious attachment to the inbox, which gets crawled with `webklex/php-imap` or `webklex/laravel-imap`. Prerequisite for the vulnerability is that the script stores the attachments without providing a `$filename`, or providing an unsanitized `$filename`, in `src/Attachment::save(string $path, string $filename = null)`. In this case, where no `$filename` gets passed into the `Attachment::save()` method, the package would use a series of unsanitized and insecure input values from the mail as fallback. Even if a developer passes a `$filename` into the `Attachment::save()` method, e.g. by passing the name or filename of the mail attachment itself (from email headers), the input values never get sanitized by the package. There is also no restriction about the file extension (e.g. ".php") or the contents of a file. This allows an attacker to upload malicious code of any type and content at any location where the underlying user has write permissions. The attacker can also overwrite existing files and inject malicious code into files that, e.g. get executed by the system via cron or requests.

Version 5.3.0 contains a patch for this issue.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-22
References: https://github.com/Webklex/php-imap/blob/5.2.0/src/Attachment.php#L251-L255; https://github.com/Webklex/php-imap/blob/5.2.0/src/Attachment.php#L252; https://github.com/Webklex/php-imap/pull/414
CVE: CVE-2023-35171
Published: 2023-06-23
Description: NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker's site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known workarounds are available.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h353-vvwv-j2r4; https://github.com/nextcloud/server/pull/38194; https://hackerone.com/reports/1977222
CVE: CVE-2023-35172
Published: 2023-06-23
Description: NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, an attacker can bruteforce the password reset links. Nextcloud Server n 25.0.7 and 26.0.2 and Nextcloud Enterprise Server 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2 contain a patch for this issue. No known workarounds are available.
CVSS Score: 8.7 (HIGH)
CWE: CWE-307
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mjf5-p765-qmr6; https://github.com/nextcloud/server/pull/38267; https://hackerone.com/reports/1987062
CVE: CVE-2023-35173
Published: 2023-06-23
Description: Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded to version 1.12.4 that contains the fix.

CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284
References: https://github.com/nextcloud/end_to_end_encryption/pull/435; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x7c7-v5r3-mg37; https://hackerone.com/reports/1914115
CVE: CVE-2023-35927
Published: 2023-06-23
Description: NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, when two server are registered as trusted servers for each other and successfully exchanged the share secrets, the malicious server could modify or delete VCards in the system addressbook on the origin server. This would impact the available and shown information in certain places, such as the user search and avatar menu. If a manipulated user modifies their own data in the personal settings the entry is fixed again.

Nextcloud Server n 25.0.7 and 26.0.2 and Nextcloud Enterprise Server 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2 contain a patch for this issue. A workaround is available. Remove all trusted servers in the "Administration" > "Sharing" settings `…/index.php/settings/admin/sharing`. Afterwards, trigger a recreation of the local system addressbook with the following `occ dav:sync-system-addressbook`.
CVSS Score: 7.6 (HIGH)
CWE: CWE-284
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h7f7-535f-7q87; https://github.com/nextcloud/server/pull/38247; https://hackerone.com/reports/1976754
CVE: CVE-2023-35928
Published: 2023-06-23
Description: Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, a user could use this functionality to get access to the login credentials of another user and take over their account. This issue has been patched in Nextcloud Server versions 25.0.7 and 26.0.2 and NextCloud Enterprise Server versions 19.0.13.9, 20.0.14.14, 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2.

Three workarounds are available. Disable app files_external. Change config setting "Allow users to mount external storage" to disabled in "Administration" > "External storage" settings `…/index.php/settings/admin/externalstorages`. Change config setting to disallow users to create external storages in "Administration" > "External storage" settings `…/index.php/settings/admin/externalstorages` with the types FTP, Nextcloud, SFTP, and/or WebDAV.
CVSS Score: 8.4 (HIGH)
CWE: CWE-274
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-637g-xp2c-qh5h; https://github.com/nextcloud/server/pull/38265; https://hackerone.com/reports/1978882
CVE: CVE-2023-1783
Published: 2023-06-23
Description: OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.




CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/stirling/; https://github.com/Orangescrum/orangescrum/; https://fluidattacks.com/advisories/stirling/
CVE: CVE-2023-35932
Published: 2023-06-23
Description: jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics. A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. The impact of a configuration injection may vary. Under some conditions, it may lead to command injection if there is for instance shell code execution from the configuration file values. This vulnerability does not currently have a fix.

CVSS Score: 7.1 (HIGH)
CWE: CWE-77, CWE-1284
References: https://github.com/tanghaibao/jcvi/blob/cede6c65c8e7603cb266bc3395ac8f915ea9eac7/jcvi/apps/base.py#LL2227C1-L2228C41; https://github.com/tanghaibao/jcvi/security/advisories/GHSA-x49m-3cw7-gq5q; https://github.com/tanghaibao/jcvi/blob/cede6c65c8e7603cb266bc3395ac8f915ea9eac7/jcvi/apps/base.py#LL2227C1-L2228C41
CVE: CVE-2023-1721
Published: 2023-06-24
Description: Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.





CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://fluidattacks.com/advisories/blessd/; https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html; https://fluidattacks.com/advisories/blessd/
CVE: CVE-2023-1724
Published: 2023-06-24
Description: Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS.




CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/towers/; https://github.com/ladybirdweb/faveo-helpdesk/; https://fluidattacks.com/advisories/towers/
CVE: CVE-2023-1722
Published: 2023-06-24
Description: Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.





CVSS Score: 9.1 (CRITICAL)
CWE: CWE-352, CWE-352
References: https://fluidattacks.com/advisories/wyckoff/; https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html; https://fluidattacks.com/advisories/wyckoff/
CVE: CVE-2023-3197
Published: 2023-06-24
Description: The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2929891/mstore-api/trunk/controllers/helpers/vendor-wcfm.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/30aab1af-a78f-4bac-b3c5-30ea854ccef7?source=cve; https://plugins.trac.wordpress.org/changeset/2929891/mstore-api/trunk/controllers/helpers/vendor-wcfm.php
CVE: CVE-2023-3387
Published: 2023-06-24
Description: The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img' shortcode in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/lana-text-to-image/tags/1.0.0/lana-text-to-image.php#L97; https://plugins.trac.wordpress.org/changeset/2929913/lana-text-to-image; https://www.wordfence.com/threat-intel/vulnerabilities/id/8acb7893-85b2-404a-b3fe-b4c1a835b3eb?source=cve
CVE: CVE-2023-3388
Published: 2023-06-24
Description: The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was made available in 2.10.1 and the issue was fully patched in 2.10.2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2857982%40beautiful-and-responsive-cookie-consent&new=2857982%40beautiful-and-responsive-cookie-consent&sfp_email=&sfph_mail=; https://www.wordfence.com/blog/2023/05/wordfence-firewall-blocks-bizarre-large-scale-xss-campaign/; https://www.wordfence.com/threat-intel/vulnerabilities/id/542a4079-b1a2-49bc-9ddd-ba7978c9992e?source=cve
CVE: CVE-2023-36612
Published: 2023-06-25
Description: Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications by using a custom-crafted deeplink scheme.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://hackerone.com/reports/1710541; https://hackerone.com/reports/1710541
CVE: CVE-2023-36630
Published: 2023-06-25
Description: In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/yunaranyancat/poc-dump/blob/main/cloudpanel/README.md; https://www.cloudpanel.io/docs/v2/changelog/; https://github.com/yunaranyancat/poc-dump/blob/main/cloudpanel/README.md
CVE: CVE-2015-20109
Published: 2023-06-25
Description: end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash), as demonstrated by use of the fnmatch library function with the **(!() pattern. NOTE: this is not the same as CVE-2015-8984; also, some Linux distributions have fixed CVE-2015-8984 but have not fixed this additional fnmatch issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=18036; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-36632
Published: 2023-06-25
Description: The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://docs.python.org/3/library/email.html; https://docs.python.org/3/library/email.utils.html; https://github.com/Daybreak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py
CVE: CVE-2023-3396
Published: 2023-06-25
Description: A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232351.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/bao22033/bao/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%201.pdf; https://vuldb.com/?ctiid.232351; https://vuldb.com/?id.232351
CVE: CVE-2023-36663
Published: 2023-06-25
Description: it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the API interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/it-novum/openITCOCKPIT/pull/1519/files; https://openitcockpit.io/2023/2023/06/13/openitcockpit-4-6-5-released-security-update/; https://github.com/it-novum/openITCOCKPIT/pull/1519/files
CVE: CVE-2023-36660
Published: 2023-06-25
Description: The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugzilla.suse.com/show_bug.cgi?id=1212112; https://git.lysator.liu.se/nettle/nettle/-/commit/867a4548b95705291a3afdd66d76e7f17ba2618f; https://git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601
CVE: CVE-2023-36661
Published: 2023-06-25
Description: Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://shibboleth.net/community/advisories/secadv_20230612.txt; https://www.debian.org/security/2023/dsa-5432; https://shibboleth.net/community/advisories/secadv_20230612.txt
CVE: CVE-2023-36664
Published: 2023-06-25
Description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Score: 7.8 (HIGH)
CWE: CWE-552
References: https://bugs.ghostscript.com/show_bug.cgi?id=706761; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0974e4f2ac0005d3731e0b5c13ebc7e965540f4d; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=505eab7782b429017eb434b2b95120855f2b0e3c
CVE: CVE-2023-36666
Published: 2023-06-25
Description: INEX IXP-Manager before 6.3.1 allows XSS. list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, page-header-preamble.foil.php, overview.foil.php, cust.foil.php, and view.foil.php may be affected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/inex/IXP-Manager/commit/fddbc38adb477c9cd46a462655ffed96d3d42229; https://github.com/inex/IXP-Manager/compare/v6.3.0...v6.3.1; https://github.com/inex/IXP-Manager/commit/fddbc38adb477c9cd46a462655ffed96d3d42229
CVE: CVE-2023-36662
Published: 2023-06-26
Description: The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management; https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management