cve.bz

CWE-264: Permissions, Privileges, and Access Controls, page 10

Filter

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

What the weakness is: CWE-264 at MITRE

Ask an AI about CWE-264

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-264: Permissions, Privileges, and Access Controls and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/264.html and https://cve.bz/cve/cwe/264?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2015-1590EPSS 0.4%

    The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.

  2. 7.5CVE-2013-7432EPSS 1.6%

    The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.

  3. 4.3CVE-2016-2959EPSS 0.9%

    IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804.

  4. 9.8CVE-2014-8428EPSS 2.4%

    Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.

  5. 7.8CVE-2015-1324EPSS 0.4%

    Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow…

  6. 7.8CVE-2015-3617EPSS 0.4%

    Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.

  7. 6.5CVE-2015-4082EPSS 2.5%

    attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte …

  8. 6.8CVE-2015-1878EPSS 0.3%

    Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key [KNETI] and…

  9. 7.0CVE-2016-5867EPSS 0.6%

    In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow.

  10. 7.8CVE-2016-5864EPSS 0.7%

    In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overfl…

  11. 7.8CVE-2016-5863EPSS 0.6%

    In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

  12. 7.0CVE-2016-5862EPSS 0.5%

    When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, re…

  13. 8.8CVE-2016-5861EPSS 0.5%

    In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow.

  14. 7.0CVE-2016-5860EPSS 0.6%

    In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow.

  15. 7.0CVE-2016-5859EPSS 0.6%

    In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow.

  16. 7.0CVE-2016-5853EPSS 0.8%

    In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the sam…

  17. 7.5CVE-2015-4165EPSS 4.5%

    The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is accessible by the attacker, and the Java VM on which Elasticsearch is running can write …

  18. 9.8CVE-2015-5244EPSS 2.7%

    The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.

  19. 5.5CVE-2015-8621EPSS 0.4%

    t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally.

  20. 7.5CVE-2015-7875EPSS 1.1%

    ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page.

  21. 3.1CVE-2015-7561EPSS 1.4%

    Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.

  22. 7.5CVE-2015-1378EPSS 1.7%

    cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users.

  23. 8.2CVE-2014-9262ExploitEPSS 7.5%

    The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

  24. 6.5CVE-2017-7916EPSS 1.5%

    A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict pr…

  25. 9.8CVE-2015-2560EPSS 15%

    Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.

  26. 6.5CVE-2016-7845EPSS 1.4%

    GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing.

  27. 6.2CVE-2016-10398EPSS 0.2%

    Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by a weak challenge. This allows adversari…

  28. 9.8CVE-2017-6713EPSS 2.9%

    A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain full access to the affected system. The vulnerability is due to static, default credentials for the Ci…

  29. 8.1CVE-2016-3998EPSS 0.9%

    NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol.

  30. 7.8CVE-2015-1795EPSS 0.5%

    Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.

  31. 7.8CVE-2015-1591EPSS 0.4%

    The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.

  32. 7.1CVE-2004-2778EPSS 0.3%

    Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected dire…

  33. 5.9CVE-2016-9972EPSS 1.5%

    IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information usi…

  34. 8.8CVE-2016-8493EPSS 1.8%

    In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.

  35. 6.5CVE-2016-10364EPSS 1.0%

    With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissio…

  36. 7.8CVE-2016-10341EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.

  37. 8.8CVE-2016-9984EPSS 1.6%

    IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276.

  38. 7.8CVE-2015-4596EPSS 0.3%

    Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.

  39. 7.8CVE-2016-7818EPSS 1.0%

    Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO …

  40. 8.8CVE-2016-4471EPSS 2.3%

    ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.

  41. 9.8CVE-2017-6640EPSS 11%

    A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. Th…

  42. 7.8CVE-2017-6638EPSS 0.4%

    A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYS…

  43. 4.3CVE-2016-3051EPSS 0.9%

    IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714.

  44. 7.8CVE-2016-8228EPSS 0.4%

    In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.

  45. 7.5CVE-2016-5007EPSS 2.8%

    Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern …

  46. 9.0CVE-2016-4435EPSS 0.9%

    An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability…

  47. 8.1CVE-2016-3084EPSS 1.2%

    The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2…

  48. 7.8CVE-2016-1876EPSS 0.3%

    The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors.

  49. 7.8CVE-2015-8089EPSS 0.3%

    The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a de…

  50. 7.5CVE-2015-5682EPSS 1.9%

    upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.