Weakness (CWE)
CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Source: MITRE CWE-264
14 results · Clear filters · Feed
-
Low 3.7
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may aff…
-
Low 3.6
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vuln…
-
Low 3.6
Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may af…
-
Low 3.6
Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vuln…
-
Low 3.3
Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerabili…
-
Low 2.8
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service…
-
Low 3.9
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability ma…
-
Low 3.8
WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress.
-
Low 3.7
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
-
Low 3.5
Config Items are shown to users without permission
Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions
-
Low 3.5
FAQ articles are shown to users without permission
Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.
-
Low 3.5
Agent is able to link customer's Config Items without permission
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
-
Low 3.9
Privilege Escalation vulnerability in ENS
Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing config…
-
Low 1.6
Privilege escalation in Bitdefender AV for Mac
A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac v…