Skip to content
OpenAdvisories

Weakness (CWE)

CWE-653: Improper Isolation or Compartmentalization

Class Draft

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.

Source: MITRE CWE-653

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2024-8118 Public exploit

    Grafana alerting wrong permission on datasource rule write endpoint

    In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine