https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:45:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-264091 EUVD-2026-264091 https://cve.radiocsirt.org/vuln/euvd-2026-264091 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67793 <p>An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the &#34;Manage roles and permissions&#34; privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the Administrator role. This issue mainly affects cloud multi-tenant deployments; on-prem single-tenant installations are typically not impacted because local admins usually already have Supervisor privileges.</p> <p>An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the &#34;Manage roles and permissions&#34; privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the Administrator role. This issue mainly affects cloud multi-tenant deployments; on-prem single-tenant installations are typically not impacted because local admins usually already have Supervisor privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-67793 https://cve.radiocsirt.org/vuln/ghsa-xm5x-8w7p-rfr8 <p>An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the &#34;Manage roles and permissions&#34; privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the Administrator role. This issue mainly affects cloud multi-tenant deployments; on-prem single-tenant installations are typically not impacted because local admins usually already have Supervisor privileges.</p> <p>An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the &#34;Manage roles and permissions&#34; privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the Administrator role. This issue mainly affects cloud multi-tenant deployments; on-prem single-tenant installations are typically not impacted because local admins usually already have Supervisor privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-xm5x-8w7p-rfr8 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2879 <p>Ein Angreifer kann mehrere Schwachstellen in DriveLock ausnutzen, um sich erweiterte Berechtigungen zu verschaffen – darunter Administratorrechte –, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in DriveLock ausnutzen, um sich erweiterte Berechtigungen zu verschaffen – darunter Administratorrechte –, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2879