CWE-269: Improper Privilege Management, page 62

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-269 at MITRE

1. 7.8CVE-2021-28250EPSS 0.3%2021-03-26

   CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth …

2. 7.8CVE-2021-27454EPSS 0.2%2021-03-25

   The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

3. 7.8CVE-2021-27448EPSS 0.2%2021-03-25

   A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1).

4. 7.8CVE-2021-27192EPSS 0.2%2021-03-25

   Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients.

5. 6.6CVE-2021-1371EPSS 0.3%2021-03-24

   A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the…

6. 7.8CVE-2019-19354EPSS 0.3%2021-03-24

   An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate th…

7. 7.8CVE-2017-20002EPSS 0.4%2021-03-17

   The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as…

8. 7.3CVE-2020-4184EPSS 0.9%2021-03-15

   IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802..

9. 7.8CVE-2021-27077EPSS 1.4%2021-03-11

   Windows Win32k Elevation of Privilege Vulnerability

10. 7.0CVE-2021-26863EPSS 12%2021-03-11

    Windows Win32k Elevation of Privilege Vulnerability

11. 7.0CVE-2021-24095EPSS 0.8%2021-03-11

    DirectX Elevation of Privilege Vulnerability

12. 7.8CVE-2021-24090EPSS 3.5%2021-03-11

    Windows Error Reporting Elevation of Privilege Vulnerability

13. 7.1CVE-2021-1729EPSS 1.0%2021-03-11

    Windows Update Stack Setup Elevation of Privilege Vulnerability

14. 7.8CVE-2021-1640EPSS 1.0%2021-03-11

    Windows Print Spooler Elevation of Privilege Vulnerability

15. 7.1CVE-2021-25337KEVEPSS 2.8%2021-03-04

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

16. 3.3CVE-2021-25336EPSS 0.2%2021-03-04

    Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent.

17. 7.7CVE-2020-12528EPSS 0.9%2021-03-02

    An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.

18. 6.5CVE-2020-12527EPSS 1.0%2021-03-02

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account…

19. 7.8CVE-2021-24102EPSS 0.5%2021-02-25

    Windows Event Tracing Elevation of Privilege Vulnerability

20. 7.8CVE-2021-24096EPSS 1.5%2021-02-25

    Windows Kernel Elevation of Privilege Vulnerability

21. 7.8CVE-2021-24092EPSS 0.6%2021-02-25

    Microsoft Defender Elevation of Privilege Vulnerability

22. 7.0CVE-2021-24087EPSS 0.5%2021-02-25

    Azure IoT CLI extension Elevation of Privilege Vulnerability

23. 7.8CVE-2021-1733EPSS 0.6%2021-02-25

    Sysinternals PsExec Elevation of Privilege Vulnerability

24. 8.8CVE-2021-1728EPSS 2.0%2021-02-25

    System Center Operations Manager Elevation of Privilege Vulnerability

25. 7.8CVE-2021-1727EPSS 0.8%2021-02-25

    Windows Installer Elevation of Privilege Vulnerability

26. 7.8CVE-2021-1698EPSS 0.7%2021-02-25

    Windows Win32k Elevation of Privilege Vulnerability

27. 10.0CVE-2021-1388EPSS 15%2021-02-24

    A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is…

28. 8.8CVE-2021-26594EPSS 1.2%2021-02-23

    In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

29. 7.8CVE-2021-25630EPSS 0.3%2021-02-23

    "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not…

30. 4.3CVE-2021-1416EPSS 0.9%2021-02-17

    Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator priv…

31. 5.3CVE-2021-26697EPSS 4.6%2021-02-17

    The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain …

32. 8.8CVE-2021-23885EPSS 1.1%2021-02-17

    Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization o…

33. 7.8CVE-2021-20075EPSS 0.2%2021-02-16

    Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.

34. 6.5CVE-2020-35557EPSS 1.0%2021-02-16

    An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of acces…

35. 8.1CVE-2020-29031EPSS 0.7%2021-02-15

    An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue af…

36. 7.8CVE-2021-26936EPSS 0.5%2021-02-10

    The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.

37. 7.8CVE-2021-0327EPSS 0.3%2021-02-10

    In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User in…

38. 7.8CVE-2021-23876EPSS 0.4%2021-02-10

    Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing c…

39. 7.8CVE-2021-23874KEVEPSS 1.0%2021-02-10

    Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

40. 4.4CVE-2021-23882EPSS 0.3%2021-02-10

    Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS…

41. 4.4CVE-2021-23880EPSS 0.3%2021-02-10

    Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running o…

42. 7.8CVE-2020-26191EPSS 0.3%2021-02-09

    Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to rea…

43. 8.2CVE-2020-35517EPSS 0.5%2021-01-28

    A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host de…

44. 7.8CVE-2020-6024EPSS 0.3%2021-01-20

    Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a direct…

45. 7.8CVE-2021-0223EPSS 0.4%2021-01-15

    A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permiss…

46. 7.8CVE-2021-0204EPSS 0.3%2021-01-15

    A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp uti…

47. 9.8CVE-2021-20618EPSS 3.3%2021-01-14

    Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitiv…

48. 5.5CVE-2021-1258EPSS 0.3%2021-01-13

    A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The…

49. 9.1CVE-2020-9141EPSS 0.4%2021-01-13

    There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity.

50. 8.0CVE-2021-1719EPSS 2.4%2021-01-12

    Microsoft SharePoint Elevation of Privilege Vulnerability