CWE-269: Improper Privilege Management, page 36

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-269 at MITRE

1. 7.8CVE-2024-9002EPSS 0.2%2024-10-11

   CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalati…

2. 6.5CVE-2024-22068EPSS 0.2%2024-10-10

   Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: …

3. 9.8CVE-2024-9518EPSS 0.5%2024-10-10

   The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for un…

4. 6.7CVE-2024-38818EPSS 0.3%2024-10-09

   VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

5. 5.1CVE-2024-9471EPSS 0.3%2024-10-09

   A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key to perform actions as a higher privile…

6. 9.8CVE-2024-3057EPSS 0.4%2024-10-08

   A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

7. 6.5CVE-2024-45919EPSS 0.3%2024-10-07

   A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflow…

8. 4.3CVE-2024-45297EPSS 0.3%2024-10-07

   Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. Al…

9. 5.9CVE-2024-44439EPSS 0.2%2024-10-04

   An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port.

10. 9.8CVE-2024-44097EPSS 0.2%2024-10-02

    According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network…

11. 9.8CVE-2024-9265EPSS 0.6%2024-10-01

    The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through …

12. 8.4CVE-2024-28813EPSS 0.2%2024-09-30

    An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activate remote SSH access to the appliance via an unexpected network interface.

13. 7.6CVE-2024-46549EPSS 0.4%2024-09-30

    An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.

14. 7.5CVE-2024-22893EPSS 0.4%2024-09-25

    OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.

15. 8.7CVE-2024-45373EPSS 0.4%2024-09-25

    Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.

16. 6.2CVE-2024-8263EPSS 0.4%2024-09-23

    An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in…

17. 6.6CVE-2024-44540EPSS 0.2%2024-09-23

    Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.

18. 6.6CVE-2024-39342EPSS 0.1%2024-09-23

    Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library (i.e. DCG.Security.dll) with a custom AES encryption process that relies on static hard-coded key value…

19. 7.2CVE-2024-0003EPSS 0.5%2024-09-23

    A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.

20. 7.6CVE-2024-41228EPSS 0.3%2024-09-23

    A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to escalate privileges and write arbitrary files.

21. 9.8CVE-2024-34331EPSS 1.0%2024-09-23

    A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.

22. 9.8CVE-2024-8853EPSS 0.6%2024-09-20

    The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers …

23. 7.5CVE-2024-47000EPSS 0.4%2024-09-20

    Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to un…

24. 6.5CVE-2024-46999EPSS 0.4%2024-09-20

    Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to unauthorized access to applications and …

25. 7.3CVE-2024-45752EPSS 0.3%2024-09-19

    logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minim…

26. 5.3CVE-2024-46989EPSS 0.3%2024-09-18

    spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission …

27. 9.9CVE-2024-45496EPSS 1.0%2024-09-17

    A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security …

28. 5.5CVE-2024-44147EPSS 0.2%2024-09-17

    This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain unauthorized access to Local Network.

29. 7.8CVE-2024-40861EPSS 0.2%2024-09-17

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root privileges.

30. 7.6CVE-2024-42798EPSS 0.4%2024-09-16

    An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator acco…

31. 8.8CVE-2024-6482EPSS 0.5%2024-09-14

    The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is due to a lack of validation and missing capability check on user-supplied data in the 'lwp_update_…

32. 8.8CVE-2024-8246EPSS 0.4%2024-09-14

    The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.8.11. This is due to …

33. 7.8CVE-2024-29779EPSS 0.07%2024-09-13

    there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

34. 8.8CVE-2024-7960EPSS 0.5%2024-09-12

    The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerability exists due to having an incorrect privilege matrix that allows users to have …

35. 7.7CVE-2024-8533EPSS 1.3%2024-09-12

    A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

36. 5.4CVE-2024-7890EPSS 0.2%2024-09-11

    Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

37. 7.8CVE-2024-5760EPSS 0.1%2024-09-11

    The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured befo…

38. 7.8CVE-2024-8306EPSS 0.2%2024-09-11

    CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalatio…

39. 7.8CVE-2024-40662EPSS 0.10%2024-09-11

    In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

40. 7.8CVE-2024-40658EPSS 0.1%2024-09-11

    In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

41. 7.8CVE-2024-40657EPSS 0.08%2024-09-11

    In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed…

42. 9.8CVE-2024-44893EPSS 0.5%2024-09-10

    An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.

43. 7.8CVE-2024-38014KEVEPSS 6.3%2024-09-10

    Windows Installer Elevation of Privilege Vulnerability

44. 9.8CVE-2024-37980EPSS 1.4%2024-09-10

    Microsoft SQL Server Elevation of Privilege Vulnerability

45. 4.4CVE-2024-39574EPSS 0.1%2024-09-10

    Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.

46. 8.8CVE-2024-45041EPSS 0.6%2024-09-09

    External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This…

47. 9.8CVE-2024-7493EPSS 0.6%2024-09-06

    The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing arbitrary data to be passed to wp_insert_user() during registration. This makes i…

48. 8.8CVE-2024-8247EPSS 0.5%2024-09-06

    The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for…

49. 8.8CVE-2024-45173EPSS 0.9%2024-09-05

    An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning sudo privileges, C-MOR is vulnerable to a privilege escalation attack. The Linux user www-data running the C-MOR web in…

50. 8.1CVE-2024-45058EPSS 1.4%2024-08-28

    i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. Prior to the 2.9 branch, an attacker with only minimal viewing privileges in the settings section …