CWE-267: Privilege Defined With Unsafe Actions, page 2
Filter
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
What the weakness is: CWE-267 at MITRE. All weaknesses
Related attack patterns (CAPEC): 5
- CAPEC-58 Restful Privilege Elevation Likelihood: High · Severity: High
- CAPEC-634 Probe Audio and Video Peripherals Likelihood: Low · Severity: High
- CAPEC-637 Collect Data from Clipboard Likelihood: Low · Severity: Low
- CAPEC-643 Identify Shared Files/Directories on System Likelihood: Medium · Severity: Medium
- CAPEC-648 Collect Data from Screen Capture Likelihood: Medium · Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-267, as MITRE names them. Credits.
Ask an AI about CWE-267
Show the prompt
Explain CWE-267: Privilege Defined With Unsafe Actions and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/267.html and https://cve.bz/cve/cwe/267?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.2CVE-2024-8631EPSS 0.5%
A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A user assigned the Admin Group Member custom role could hav…
- 5.4CVE-2024-5623EPSS 0.2%
An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
- 7.3CVE-2024-5622EPSS 0.2%
An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.
- 6.7CVE-2024-20411EPSS 0.2%
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient securi…
- 8.8CVE-2024-42365ExploitEPSS 4.7%
Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may chang…
- 8.7CVE-2024-39866EPSS 0.2%
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key an…
- 7.8CVE-2024-32901EPSS 0.08%
In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
- 7.1CVE-2023-28049EPSS 0.1%
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete.
- 8.8CVE-2023-41966EPSS 0.8%
The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.
- 8.7CVE-2023-43746EPSS 0.5%
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to …
- 7.8CVE-2023-44218EPSS 0.2%
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.
- 8.8CVE-2023-32457EPSS 0.6%
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.
- 8.0CVE-2023-22647EPSS 0.7%
An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-leve…
- 8.8CVE-2023-2983EPSS 0.9%
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.
- 9.1CVE-2021-44547EPSS 0.7%
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.
- 6.8CVE-2021-44476EPSS 0.5%
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.
- 8.7CVE-2021-23186EPSS 0.6%
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tenant system.
- 8.7CVE-2021-23166EPSS 0.6%
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.
- 6.5CVE-2023-27895EPSS 0.4%
SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanum…
- 6.5CVE-2022-38124EPSS 0.5%
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
- 7.1CVE-2021-40354EPSS 0.6%
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" funct…
- 8.8CVE-2021-32739EPSS 1.1%
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow pri…
- 8.8CVE-2020-29396EPSS 3.1%
A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.
- 6.5CVE-2020-7824EPSS 1.0%
A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could …
- 7.2CVE-2019-10170EPSS 1.2%
A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw allows an attacker with authenticated user and realm management permissions to configure a malicious …
- 7.2CVE-2019-10169EPSS 1.3%
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execut…
- 5.9CVE-2019-14865EPSS 0.3%
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootab…
- 4.7CVE-2017-2616EPSS 0.3%
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.