CWE-285: Improper Authorization, page 30

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

What the weakness is: CWE-285 at MITRE

1. 8.8CVE-2022-31168EPSS 0.8%2022-07-22

   Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. Th…

2. 5.7CVE-2022-2393EPSS 0.3%2022-07-14

   A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another…

3. 7.5CVE-2022-33713EPSS 0.9%2022-07-12

   Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information.

4. 5.3CVE-2022-33712EPSS 0.7%2022-07-12

   Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.

5. 3.3CVE-2022-33705EPSS 0.2%2022-07-12

   Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission.

6. 5.5CVE-2022-33702EPSS 0.09%2022-07-12

   Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset.

7. 3.3CVE-2022-30757EPSS 0.10%2022-07-12

   Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FINE_LOCATION permission.

8. 8.8CVE-2022-30670EPSS 1.5%2022-06-16

   RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrat…

9. 7.5CVE-2022-2019EPSS 0.8%2022-06-09

   A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manip…

10. 7.5CVE-2022-30746EPSS 0.9%2022-06-07

    Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

11. 4.6CVE-2022-30730EPSS 0.3%2022-06-07

    Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.

12. 9.8CVE-2022-30722EPSS 0.3%2022-06-07

    Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account.

13. 7.5CVE-2022-30717EPSS 0.2%2022-06-07

    Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera functions via deeplink.

14. 5.3CVE-2022-31025EPSS 1.0%2022-06-07

    Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0beta5 on the `beta` and `tests-passed` branches, inviting users on sites that use single sign-on could bypass the `must_a…

15. 4.3CVE-2022-29236EPSS 0.9%2022-06-02

    BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. The permission check is inadvertently…

16. 4.3CVE-2022-29234EPSS 0.9%2022-06-02

    BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1, an attacker could send messages to a locked chat within a grace period of 5s any lock setting in the meeting was chang…

17. 4.3CVE-2022-29233EPSS 1.1%2022-06-02

    BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access controls to gain access to all breakout rooms of the meeting they are in. The per…

18. 7.1CVE-2022-26773EPSS 0.6%2022-05-26

    A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.

19. 8.8CVE-2022-26857EPSS 1.0%2022-05-26

    Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and…

20. 6.5CVE-2021-27772EPSS 0.7%2022-05-12

    Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group…

21. 4.3CVE-2022-0027EPSS 0.5%2022-05-11

    An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR in…

22. 8.8CVE-2021-43939EPSS 0.6%2022-04-28

    Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.

23. 9.8CVE-2022-0993EPSS 7.5%2022-04-19

    The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs u…

24. 7.8CVE-2022-28776EPSS 0.3%2022-04-11

    Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.

25. 6.5CVE-2022-1224EPSS 1.0%2022-04-04

    Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

26. 4.3CVE-2022-0406EPSS 0.7%2022-04-03

    Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

27. 9.1CVE-2022-0860EPSS 2.3%2022-03-11

    Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

28. 6.5CVE-2022-0821EPSS 0.7%2022-03-11

    Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.

29. 8.1CVE-2022-0829EPSS 1.3%2022-03-02

    Improper Authorization in GitHub repository webmin/webmin prior to 1.990.

30. 9.8CVE-2022-21196EPSS 3.7%2022-02-18

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An att…

31. 6.5CVE-2022-0587EPSS 1.0%2022-02-15

    Improper Authorization in Packagist librenms/librenms prior to 22.2.0.

32. 5.3CVE-2022-24002EPSS 0.5%2022-02-11

    Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity.

33. 6.5CVE-2021-42000EPSS 0.5%2022-02-10

    When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password.

34. 7.8CVE-2021-44204EPSS 0.2%2022-02-04

    Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect …

35. 9.1CVE-2021-28506EPSS 1.4%2022-01-14

    An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

36. 7.8CVE-2021-28501EPSS 0.8%2022-01-14

    An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

37. 7.8CVE-2021-28500EPSS 0.8%2022-01-14

    An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

38. 7.5CVE-2022-22288EPSS 0.9%2022-01-10

    Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.

39. 3.3CVE-2022-22272EPSS 0.1%2022-01-10

    Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission

40. 3.3CVE-2022-22269EPSS 0.1%2022-01-10

    Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local Bluetooth MAC address.

41. 6.1CVE-2022-22268EPSS 0.1%2022-01-10

    Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode.

42. 3.3CVE-2022-22267EPSS 0.1%2022-01-10

    Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information.

43. 6.5CVE-2020-9061EPSS 0.8%2022-01-10

    Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptibl…

44. 6.1CVE-2021-3837EPSS 0.5%2022-01-03

    openwhyd is vulnerable to Improper Authorization

45. 6.5CVE-2021-43847EPSS 1.2%2021-12-20

    HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for …

46. 3.3CVE-2021-25521EPSS 0.2%2021-12-08

    Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.

47. 8.8CVE-2021-42126EPSS 4.0%2021-12-07

    An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.

48. 7.8CVE-2021-36311EPSS 0.2%2021-11-23

    Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execut…

49. 9.8CVE-2021-42338EPSS 5.8%2021-11-19

    4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload a…

50. 4.3CVE-2021-42337EPSS 0.9%2021-11-16

    The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general user’s permission, the remote attacker can access account information except passwords by crafting URL parameters.