cve.bz

CWE-269: Improper Privilege Management, page 70

Filter

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-269 at MITRE

Ask an AI about CWE-269

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-269: Improper Privilege Management and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/269.html and https://cve.bz/cve/cwe/269?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2012-6639EPSS 2.0%

    An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.

  2. 4.3CVE-2019-13705EPSS 0.6%

    Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.

  3. 7.8CVE-2019-13702EPSS 0.5%

    Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.

  4. 7.8CVE-2012-5617EPSS 0.4%

    gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation

  5. 7.8CVE-2019-3466EPSS 0.5%

    The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.

  6. 7.8CVE-2011-3349EPSS 0.4%

    lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.

  7. 7.8CVE-2011-4954EPSS 0.3%

    cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE

  8. 7.8CVE-2018-18368EPSS 0.6%

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated ac…

  9. 6.7CVE-2011-2910EPSS 0.4%

    The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges whi…

  10. 8.8CVE-2019-15799EPSS 2.3%

    An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administ…

  11. 5.5CVE-2019-14590EPSS 0.3%

    Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access.

  12. 3.3CVE-2019-15332EPSS 0.2%

    The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27…

  13. 8.8CVE-2019-3651EPSS 1.1%

    Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

  14. 8.8CVE-2010-4664EPSS 1.2%

    In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.

  15. 7.8CVE-2019-2193EPSS 0.2%

    In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to t…

  16. 7.8CVE-2019-1405KEVExploitEPSS 30%

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

  17. 7.8CVE-2019-1388KEVEPSS 8.6%

    An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

  18. 7.1CVE-2019-18845EPSS 0.4%

    The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \…

  19. 9.8CVE-2019-18623EPSS 1.5%

    Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created …

  20. 9.8CVE-2006-4243EPSS 1.8%

    linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.

  21. 7.8CVE-2013-4251EPSS 0.4%

    The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

  22. 7.3CVE-2013-2012EPSS 0.4%

    autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.

  23. 4.3CVE-2019-18365EPSS 0.8%

    In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.

  24. 9.8CVE-2019-18425EPSS 2.5%

    An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain P…

  25. 8.8CVE-2018-18931EPSS 1.6%

    An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges …

  26. 8.8CVE-2019-4546EPSS 0.7%

    After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.

  27. 9.8CVE-2019-16897EPSS 1.6%

    In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, …

  28. 7.7CVE-2019-10716ExploitEPSS 4.1%

    An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated security technologies via a /integrations.json JSON REST API request.

  29. 8.8CVE-2019-15901EPSS 2.2%

    An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetB…

  30. 9.1CVE-2019-17631EPSS 2.1%

    From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.

  31. 7.8CVE-2019-16519EPSS 0.3%

    ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks.

  32. 7.8CVE-2019-9745EPSS 0.5%

    CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). T…

  33. 4.9CVE-2019-14838EPSS 1.1%

    A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

  34. 9.8CVE-2018-21025EPSS 2.8%

    In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.

  35. 8.8CVE-2019-15747EPSS 1.1%

    SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side.

  36. 3.3CVE-2019-4112EPSS 0.3%

    IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105.

  37. 7.8CVE-2018-9425EPSS 0.1%

    In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for …

  38. 6.5CVE-2019-14220EPSS 0.9%

    An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary f…

  39. 8.8CVE-2019-11280EPSS 1.5%

    Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others …

  40. 6.5CVE-2016-11011EPSS 1.4%

    The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.

  41. 8.8CVE-2016-11004EPSS 1.9%

    The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation.

  42. 8.8CVE-2016-11003EPSS 1.9%

    The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation.

  43. 8.8CVE-2016-11002EPSS 1.9%

    The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation.

  44. 4.3CVE-2015-9390EPSS 0.9%

    The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.

  45. 6.5CVE-2019-4477EPSS 1.3%

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.

  46. 9.8CVE-2016-10972ExploitEPSS 9.3%

    The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.

  47. 9.8CVE-2016-10971EPSS 1.9%

    The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.

  48. 8.8CVE-2016-10968EPSS 1.6%

    The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.

  49. 7.8CVE-2019-1215KEVExploitEPSS 19%

    An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

  50. 6.5CVE-2019-16202EPSS 1.3%

    MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation…