Weakness (CWE)
CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-284
8,243 results · Feed
-
Medium 4.4
Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pote…
-
Medium 4.7
Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially en…
-
High 8.8
Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to p…
-
High 8.8
Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user t…
-
Medium 5.5
Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an aut…
-
Medium 6.7
Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allo…
-
Medium 5.4
Improper Access Control in mlflow/mlflow
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by…
-
High 7.8
ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
-
Medium 6.5
Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable.
-
Medium 4.3
Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticate…
-
Medium 6.1
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
-
Medium 6.5
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in t…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…
-
Low 2.4
A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacke…
-
Medium 5.9
VikBooking < 1.6.8 - Broken Access Control
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permitting any users that can access a menu to manipulate requests and perform unauthorized actions such as e…
-
Medium 4.3
SimpleShop <= 2.10.0 - Cross-Site Request Forgery
The SimpleShop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10.0. This is due to missing or incorrect nonce validation on the maybe_disconnect_simpleshop function. This makes it possible for unauthen…
-
High 8.8
An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to b…
-
High 7.8
In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error…
-
Low 2.2
An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) …
-
High 7.5
An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of …
-
Medium 4.3
ClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings
The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improper capability check on the get_settings function in all versions up to, and including, 3.2.4. This makes it possible for authenticated atta…
-
High 8.4
Improper Access Control in Graphics Linux
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
-
Medium 6.4
Server-side Request Forgery during remote file pull in Pterodactyl wings
Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control (GHSA-6rg3-8h8x-5xfv) that prevents accessing internal endpoints of the node…
-
Medium 6.8
A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Applia…
-
Medium 5.3
Subway – Private Site Option <= 2.1.4 - Improper Access Control to Sensitive Information Exposure via REST API
The Subway – Private Site Option plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's private site featur…
-
Medium 5.3
Analytify <= 5.2.1 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification
The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpa_check_authentication' function in all versions up to, and …
-
High 8.4
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted comman…
-
High 7.5CVE-2024-31964 Public exploit
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
Critical 9.1
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
Medium 4.8
Remote for TLS session may be trusted despite constraints in Pluto lang
Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. In affected versions an attacker with the ability to actively intercept network traffic would be able to use a specifically-crafted certificate to fool Pluto into trusting it to be th…
-
Medium 5.2
Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged…
-
Medium 6.2
An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted …
-
Medium 5.3
Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control w…
-
Medium 5.5
Measuresoft ScadaPro Improper Access Control
The entire parent directory - C:\ScadaPro and its sub-directories and files are configured by default to allow user, including unprivileged users, to write or overwrite files.
-
High 7.6
NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities
Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal us…
-
Critical 9.8
Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build…
-
High 7.5
Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases h…
-
Low 2.7
Mattermost fails to fully validate role changes
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.
-
Low 2.7
Mattermost allows team admins to promote guests to team admins
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.
-
Medium 5.1
Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at j…