access control vulnerabilities and fixes

Recent CVEs affecting access control, with upgrade or downgrade steps. 6 tracked.

Also searched as: accesscontrol.

access control has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-13. Highest priority: CVE-2017-20039 (score 57/100).

• CVE-2022-39801 HIGH 7.5 DOWNGRADE SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter se
• CVE-2021-44233 HIGH 8.8 DOWNGRADE SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization ch
• CVE-2017-20040 MEDIUM 5.9 DOWNGRADE A vulnerability was found in SICUNET Access Controller 0.32-05z
• CVE-2017-20039 CRITICAL 9.8 DOWNGRADE A vulnerability was found in SICUNET Access Controller 0.32-05z
• CVE-2017-20038 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical
• CVE-2017-20037 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical

FAQ

How do I fix access control vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is access control being exploited right now?

None of the tracked access control CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which access control CVE should I patch first?

CVE-2017-20039 currently ranks highest (57/100): A vulnerability was found in SICUNET Access Controller 0.32-05z.

RSS feed for access control · ← Back to latest CVEs