Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1220: Insufficient Granularity of Access Control

Base Incomplete

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack the required granularity

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation, Testing

    - Access-control-policy protections must be reviewed for design inconsistency and common weaknesses.

    - Access-control-policy definition and programming flow must be tested in pre-silicon, post-silicon testing.

Source: MITRE CWE-1220

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-85316 Public exploit

    Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching

    Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The component decided whether an endpoint ran in proxy mode by testing whet…

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2023-43040 Public exploit

    IBM Spectrum Fusion HCI improper access control

    IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

    IBM Spectrum Fusion HCI ceph ceph Debian Ubuntu