Skip to content
OpenAdvisories

Weakness (CWE)

CWE-286: Incorrect User Management

Class Incomplete

The product does not properly manage a user within its environment.

More detail

Users can be assigned to the wrong group (class) of permissions.

Source: MITRE CWE-286

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.6
    CVE-2024-46671 Public exploit

    An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, vers…

    Fortinet FortiWeb Network devices
  • Medium 5.3
    CVE-2024-29296 Public exploit

    Portainer CE allows username enumeration through authentication response timing

    A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

    github.com/portainer/portainer Go