cve.bz

CWE-648: Incorrect Use of Privileged APIs, page 2

Filter

The product does not conform to the API requirements for a function call that requires extra privileges. This could allow attackers to gain privileges by causing the function to be called incorrectly.

What the weakness is: CWE-648 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2
  • CAPEC-107 Cross Site Tracing Likelihood: Medium · Severity: Very High
  • CAPEC-234 Hijacking a privileged process Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-648, as MITRE names them. Credits.

Ask an AI about CWE-648

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-648: Incorrect Use of Privileged APIs and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/648.html and https://cve.bz/cve/cwe/648?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2022-4796EPSS 0.8%

    Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

  2. 8.1CVE-2022-4687EPSS 0.7%

    Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.

  3. 8.8CVE-2022-20956EPSS 1.5%

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access co…

  4. 8.2CVE-2022-23720EPSS 0.2%

    PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file. An IT administrator could mistakenly deploy administrator privileged PingID API credentials, su…

  5. 9.8CVE-2022-2023EPSS 3.3%

    Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.

  6. 8.1CVE-2022-24821EPSS 0.8%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Simple users can create global SSX/JSX without specific rights: in theory only users with Programming Rights should be allowed to crea…

  7. 7.1CVE-2022-24073EPSS 0.6%

    The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

  8. 4.3CVE-2022-24071EPSS 0.7%

    A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.

  9. 6.5CVE-2020-7927EPSS 1.0%

    Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 versions prior to and including 4.2.17, MongoDB…

  10. 7.8CVE-2020-5291EPSS 0.9%

    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable.…

  11. 7.8CVE-2019-14812EPSS 2.5%

    A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file co…

  12. 7.8CVE-2019-10216EPSS 2.3%

    In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript fil…

  13. 8.8CVE-2019-14869EPSS 3.1%

    A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw b…

  14. 9.8CVE-2019-14813EPSS 11%

    A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could…

  15. 7.8CVE-2019-14817EPSS 2.0%

    A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript fil…

  16. 7.8CVE-2019-14811EPSS 3.7%

    A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file c…

  17. 9.8CVE-2019-1010178EPSS 4.6%

    Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/connector.php. The attack vector is: Uploading a PHP file or…

  18. 7.8CVE-2019-3839EPSS 1.7%

    It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file syste…

  19. 5.5CVE-2019-3838EPSS 2.5%

    It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside …

  20. 5.5CVE-2019-3835EPSS 2.5%

    It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the c…