Skip to content
OpenAdvisories

Weakness (CWE)

CWE-671: Lack of Administrator Control over Security

Class Draft

The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect the environment in which the product is being used.

More detail

If the product's administrator does not have the ability to manage security-related decisions at all times, then protecting the product from outside threats - including the product's developer - can become impossible. For example, a hard-coded account name and password cannot be changed by the administrator, thus exposing that product to attacks that the administrator can not prevent.

Source: MITRE CWE-671

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2022-29163

    Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server

    Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password protected even if the administrator requires links to be password protected. Ve…

    Nextcloud security-advisories