Weakness (CWE)
CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
How to prevent it (5 mitigations)
-
Architecture and Design
Divide the product into anonymous, normal, privileged, and administrative areas. Reduce the attack surface by carefully mapping roles with data and functionality. Use role-based access control (RBAC) [REF-229] to enforce the roles at the appropriate boundaries.
Note that this approach may not protect against horizontal authorization, i.e., it will not protect a user from attacking others with the same role.
-
Architecture and Design
Ensure that access control checks are performed related to the business logic. These checks may be different than the access control checks that are applied to more generic resources such as files, connections, processes, memory, and database records. For example, a database may restrict access for medical records to a specific database user, but each record might only be intended to be accessible to the patient and the patient's doctor [REF-7].
-
Architecture and Design
Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
For example, consider using authorization frameworks such as the JAAS Authorization Framework [REF-233] and the OWASP ESAPI Access Control feature [REF-45].
-
Architecture and Design
For web applications, make sure that the access control mechanism is enforced correctly at the server side on every page. Users should not be able to access any unauthorized functionality or information by simply requesting direct access to that page.
One way to do this is to ensure that all pages containing sensitive information are not cached, and that all such pages restrict access to requests that are accompanied by an active and authenticated session token associated with a user who has the required permissions to access that page.
-
System Configuration, Installation
Use the access control capabilities of your operating system and server environment and define your access control lists accordingly. Use a "default deny" policy when defining these ACLs.
Source: MITRE CWE-862
2,357 results · Clear filters · Feed
-
High 7.8
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with n…
-
High 7.8
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with n…
-
High 7.7
Missing Authorization in answerdev/answer
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.
-
High 7.5
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPa…
-
High 7.8CVE-2023-21094 Public exploit
In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due…
-
High 8.1
A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or dele…
-
High 7.3CVE-2022-4940 Scanner template
WCFM Membership <= 2.10.0 - Missing Authorization
The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks on various AJAX actions. This makes it possible for unauthenticated attackers to p…
-
High 7.8CVE-2023-26269 Public exploit
Apache James server: Privilege escalation through unauthenticated JMX
Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that versi…
-
High 8.1
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html.
-
High 7.5
The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi setting…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8CVE-2023-20955 Public exploit
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unin…
-
High 7.8
In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions check…
-
High 8.2
Missing MAC layer security in Wi-SUN Linux Border Router
Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network.
-
High 8.2
Missing MAC layer security in Wi-SUN SDK
Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network.
-
High 8.1
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) wit…
-
High 7.4
Nomad Job Submitter Privilege Escalation Using Workload Identity
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
-
High 8.6
Improper access control to download file in metersphere
metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`, which allows any user to download any file without authentication. This issue may expose all files…
-
High 8.8
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin adds a registration form to the Elementor page builders functionality. As part of the registrati…
-
High 7.1
IDOR: Updating a playbook via the Playbooks API
A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.
-
High 7.2
ZoneMinder vulnerable to Missing Authorization
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. Ther…
-
High 7.5
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabi…
-
High 7.4
Authenticated user can gain unauthorized shell pod and kubectl access in the local cluster
A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10;…
-
High 7.8
In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system …
-
High 7.5CVE-2022-48166 Scanner template
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configu…
-
High 8.8
Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API co…
-
High 7.5
Missing Authorization in phpipam/phpipam
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.
-
High 8.6
Broken Access Control in 3rd party TYPO3 extension "femanager"
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.
-
High 8.1
Quick Restaurant Menu <= 2.0.2 - Missing Authorization
The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level permi…
-
High 8.6
argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6.0-rc4, are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applicat…
-
High 7.8
In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on start…
-
High 7.8
In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due…
-
High 8.8
Insufficient permission check in the VQL copy() function
Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any command on the server including writing arbitrary files. However, lower privilege users are generally forbidden from writin…
-
High 7.3CVE-2023-22478 Scanner template
KubePi is vulnerable to missing authorization
KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.