CWE-285: Improper Authorization, page 26

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

What the weakness is: CWE-285 at MITRE

1. 4.3CVE-2023-50871EPSS 0.4%2023-12-15

   In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed

2. 5.4CVE-2023-41673EPSS 0.4%2023-12-13

   An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.

3. 6.5CVE-2023-6538ExploitEPSS 1.6%2023-12-11

   SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration …

4. 6.5CVE-2023-5808EPSS 0.5%2023-12-05

   SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that …

5. 5.3CVE-2023-48309EPSS 0.7%2023-11-20

   NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affected by a vulnerability. A bad actor could create an empty/mock user, by getting ho…

6. 7.5CVE-2023-48241ExploitEPSS 73%2023-11-20

   XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results…

7. 3.7CVE-2023-30954EPSS 0.3%2023-11-15

   The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.

8. 6.7CVE-2023-32662EPSS 0.2%2023-11-14

   Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access.

9. 7.8CVE-2023-28378EPSS 0.2%2023-11-14

   Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

10. 5.4CVE-2023-36633EPSS 0.5%2023-11-14

    An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTT…

11. 8.1CVE-2023-47109EPSS 0.8%2023-11-08

    PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give…

12. 5.3CVE-2023-42541EPSS 0.4%2023-11-07

    Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.

13. 7.8CVE-2023-28556EPSS 0.1%2023-11-07

    Cryptographic issue in HLOS during key management.

14. 5.5CVE-2023-5948EPSS 0.3%2023-11-03

    Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91.

15. 9.8CVE-2023-42491EPSS 0.8%2023-10-25

    EisBaer Scada - CWE-285: Improper Authorization

16. 8.8CVE-2021-4334EPSS 0.7%2023-10-20

    The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check on the fpd_update_options function in versions up to, and including, 4.6.9. This makes it possible…

17. 8.1CVE-2020-36714EPSS 0.5%2023-10-20

    The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to ac…

18. 6.3CVE-2021-4335EPSS 0.4%2023-10-20

    The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized access to data and modification of plugin settings due to a missing capability check on multiple AJAX functions in versions up to, and including, 4.6.9. This mak…

19. 6.5CVE-2023-5654EPSS 0.6%2023-10-19

    The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requ…

20. 7.5CVE-2023-38220EPSS 0.8%2023-10-13

    Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that…

21. 8.8CVE-2023-41841EPSS 1.1%2023-10-10

    An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions.

22. 8.6CVE-2023-3037EPSS 0.7%2023-10-04

    Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter.

23. 9.1CVE-2023-20186EPSS 0.8%2023-09-27

    A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and copy files to or from the …

24. 7.8CVE-2023-44125EPSS 0.1%2023-09-27

    The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.abba") app. The att…

25. 7.8CVE-2023-44123EPSS 0.1%2023-09-27

    The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacke…

26. 4.3CVE-2023-42453EPSS 0.8%2023-09-27

    Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that the users were not able to view the ev…

27. 8.8CVE-2023-28055EPSS 0.4%2023-09-27

    Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete acce…

28. 7.5CVE-2023-0456EPSS 0.6%2023-09-27

    A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorize…

29. 7.5CVE-2022-47553EPSS 0.8%2023-09-19

    Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server.

30. 7.5CVE-2023-0813EPSS 0.9%2023-09-15

    A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in…

31. 7.5CVE-2023-33020EPSS 0.4%2023-09-05

    Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

32. 7.5CVE-2023-33019EPSS 0.4%2023-09-05

    Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

33. 7.5CVE-2023-28584EPSS 0.4%2023-09-05

    Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

34. 6.5CVE-2023-32678EPSS 0.5%2023-08-25

    Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used to be subscribed to a private stream and have been removed from it since retain the ability to edit messages/topics, mo…

35. 4.3CVE-2023-38508EPSS 0.7%2023-08-24

    Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of a…

36. 7.8CVE-2023-3899EPSS 0.2%2023-08-23

    A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state…

37. 9.1CVE-2023-39403EPSS 0.4%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

38. 9.1CVE-2023-39402EPSS 0.5%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

39. 9.1CVE-2023-39401EPSS 0.5%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

40. 9.1CVE-2023-39400EPSS 0.5%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

41. 9.1CVE-2023-39399EPSS 0.4%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

42. 9.1CVE-2023-39398EPSS 0.4%2023-08-13

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

43. 6.7CVE-2023-28385EPSS 0.2%2023-08-11

    Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.

44. 8.8CVE-2023-4243EPSS 0.9%2023-08-09

    The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-l…

45. 4.3CVE-2023-3957EPSS 0.5%2023-07-27

    The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient restriction on the 'apg_profile_update' function in versions up to, and including, 1.9. This makes it possible for a…

46. 6.5CVE-2023-36826EPSS 0.6%2023-07-25

    Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known b…

47. 5.4CVE-2023-23568EPSS 0.3%2023-07-25

    Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80…

48. 5.4CVE-2023-25074EPSS 0.3%2023-07-25

    Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192…

49. 6.5CVE-2023-22428EPSS 0.4%2023-07-24

    Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior t…

50. 9.8CVE-2023-3805EPSS 0.9%2023-07-21

    A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Lo…