Weakness (CWE)
CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
How to prevent it (3 mitigations)
-
Architecture and Design, Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
-
Architecture and Design
Follow the principle of least privilege when assigning access rights to entities in a software system.
-
Architecture and Design
Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.
Source: MITRE CWE-269
3,026 results · Feed
-
Medium 5.3
Prevent topic list filtering by hidden tags for unauthorized users in Discourse
Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are adv…
-
Medium 6.5
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By m…
-
Medium 5.9
An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things …
-
Critical 9.8
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the applic…
-
Critical 9.8
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation
The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_…
-
High 8.4
An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management applicati…
-
High 7.6
An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connect…
-
Medium 6.2
Apache Hadoop: Temporary File Local Information Disclosure
Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary di…
-
High 7.5
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This…
-
High 8.8
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Improper Privilege Management
Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
-
Medium 6.2
An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped P…
-
Critical 9.1
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an…
-
Critical 9.8
A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privi…
-
Medium 6.6
Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier us…
-
Medium 6.6
Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command …
-
High 7.6
A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to e…
-
Critical 9.8
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves a…
-
High 7.3
User Grant Deactivation not Working in Zitadel
Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to unauthorized access to applications and resources. Additiona…
-
High 8.1
Service Users Deactivation not Working in Zitadel
Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to unauthorized access to…
-
High 8.5
logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an …
-
Low 3.7
Multiple caveats on resources of the same type can result in no permission when permission is expected
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission being returned when …
-
Critical 9.9
Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing un…
-
High 7.8
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root …
-
High 7.7
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gai…
-
High 7.6
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_u…
-
High 8.8
Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is due to a lack of validation and missing capability check on user-supplied data in the 'lwp_update_password_action' fun…
-
High 8.8
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.8.11. This is due to plugin not properly …
-
High 7.4
there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privil…
-
High 8.8
Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8®
The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerability exists due to having an incorrect privilege matrix that allows users to have access to functions …
-
High 7.7
Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions
A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.
-
Medium 5.4
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
-
High 8.4
The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creati…
-
High 7.8
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiali…
-
High 7.8
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
High 7.8
In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This c…
-
High 7.8
In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users d…
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server Elevation of Privilege Vulnerability
-
High 7.8CVE-2024-38014 Exploited
Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
KEV Sep 10, 2024 -
Medium 6.7
Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attac…
-
Critical 9.8
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges vi…