Skip to content
OpenAdvisories

Weakness (CWE)

CWE-269: Improper Privilege Management

Class Draft Mapping discouraged

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

How to prevent it (3 mitigations)

  1. Architecture and Design, Operation

    Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

  2. Architecture and Design

    Follow the principle of least privilege when assigning access rights to entities in a software system.

  3. Architecture and Design

    Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Source: MITRE CWE-269

All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Critical 9.3
    CVE-2022-3405 Public exploit

    Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The followin…

    Acronis Acronis Cyber Protect 15 Acronis Cyber Backup 12.5
  • Critical 9.1
    CVE-2022-41923 Public exploit

    Grails Spring Security Core plugin vulnerable to privilege escalation

    Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor endpoint). In some …

    grails grails-spring-security-core
  • Critical 9.8
    CVE-2022-24637 Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Open Web Analytics

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intend…

    open-web-analytics/open-web-analytics Packagist
  • Critical 9.8
    CVE-2021-38540 Public exploit Scanner template EPSS 81%

    Apache Airflow: Variable Import endpoint missed authentication check

    The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclo…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Critical 9.8
    CVE-2021-34621 Public exploit Scanner template EPSS 69%

    ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

    A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .

    ProfilePress ProfilePress Web / CMS
  • Critical 9.8
    CVE-2021-33026 Public exploit

    Deserialization of Untrusted Data in Flask-Caching

    The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can c…

    flask-caching flask-caching Debian PyPI
  • Critical 9.8
    CVE-2021-20021 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

    SonicWall Email Security Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-13693 Public exploit EPSS 44%

    bbPress unauthenticated privilege-escalation

    An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

    bbpress/bbpress Packagist
  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go
  • Critical 9.8
    CVE-2017-11467 Public exploit EPSS 73%

    OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

    OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

    com.orientechnologies:orientdb-core Maven
  • Critical 9.8
    CVE-2017-5689 Exploited Public exploit Scanner template EPSS 92%

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

    Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
    KEV Jan 28, 2022