Skip to content
OpenAdvisories

Weakness (CWE)

CWE-286: Incorrect User Management

Class Incomplete

The product does not properly manage a user within its environment.

More detail

Users can be assigned to the wrong group (class) of permissions.

Source: MITRE CWE-286

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2024-48853

    Authenticated Escalation to guest to root

    An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 9.8
    CVE-2023-26689

    An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted…