Weakness (CWE)
CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-284
8,243 results · Feed
-
Critical 9.1
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may ga…
-
High 8.8CVE-2024-1675 EPSS 11%
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass…
-
Medium 4.3
Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated…
-
Medium 5.3
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'. This makes it possible for unauthenticated attackers to extra…
-
Medium 4.3
Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saswp_reviews_form_render' function in all versions up to, and including, 1.26. This makes it possible …
-
Medium 5.3
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's site privacy feature and view r…
-
Medium 5.3
WP Maintenance <= 6.1.6 - Information Exposure
The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page conte…
-
Medium 5.3
WPify Woo Czech <= 4.0.8 - Missing Authorization
The WPify Woo Czech plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the maybe_send_to_packeta function in all versions up to, and including, 4.0.8. This makes it possible for unauthenticated attackers to …
-
Medium 5.3
Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure
The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content thus bypas…
-
Medium 5.3
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'submit_review' function in all versions up to, and including, 5.38.12. This makes it possible for unauthenti…
-
High 7.4
CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication) method. Specifically, an appl…
-
High 8.8
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03…
-
Medium 6.3
Privilege escalation in Liferay Portal
Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.
-
High 7.1
Local Access to Sensitive Data in Brivo ACS100 and ACS300
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
-
Critical 9.7CVE-2023-50257 Public exploit
Disconnect Vulnerability in RTPS Packets Used by SROS2
eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and `guid` values used to disconnect between…
-
Medium 4.3
Msa-24-0004: forum export did not respect activity group settings
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
-
Medium 4.3
Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
-
Medium 4.7
Weak permission vulnerability in LaborOfficeFree
A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfiles(x86)% LaborOfficeFree BackUp'.
-
Medium 5.5
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may …
-
High 7.7
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may …
-
Medium 6.1
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)…
-
Medium 6.5
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). S…
-
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
High 8.6
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
Low 2.6
Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a…
-
High 7.4
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on …
-
Medium 6.8
In multiple locations, there is a possible way to request access to directories that should be hidden due to improper i…
-
High 7.3
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i…
-
High 7.2CVE-2024-24386 Public exploit
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vital…
-
High 7.1
Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to pot…
-
Medium 6.7
Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may …
-
High 7.8
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Tool…
-
Medium 6.6
Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user…
-
Medium 5.5
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…
-
Medium 6.3
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially…
-
High 8.8
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…
-
Medium 5.0
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allo…
-
Medium 5.5
Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to poten…
-
Medium 6.8
Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to poten…
-
Medium 6.7
Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to pot…