cve.bz

CWE-668: Exposure of Resource to Wrong Sphere, page 14

Filter

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

What the weakness is: CWE-668 at MITRE

Ask an AI about CWE-668

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-668: Exposure of Resource to Wrong Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/668.html and https://cve.bz/cve/cwe/668?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2020-7912EPSS 1.5%

    In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.

  2. 4.3CVE-2019-4633EPSS 0.9%

    IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007.

  3. 9.8CVE-2019-10781EPSS 1.4%

    In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

  4. 7.8CVE-2019-3682EPSS 0.3%

    The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

  5. 7.5CVE-2019-20149EPSS 2.3%

    ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin att…

  6. 6.5CVE-2012-5639EPSS 5.8%

    LibreOffice and OpenOffice automatically open embedded content

  7. 10.0CVE-2019-8779EPSS 1.5%

    A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct…

  8. 4.4CVE-2014-2387EPSS 0.4%

    Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

  9. 5.3CVE-2019-13927EPSS 1.7%

    A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All firmware versions < V6.00.320), Desigo PX automation controll…

  10. 7.1CVE-2013-2183EPSS 0.4%

    Monkey HTTP Daemon has local security bypass

  11. 5.5CVE-2013-0163EPSS 0.3%

    OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS

  12. 6.7CVE-2019-15689EPSS 0.8%

    Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by…

  13. 9.8CVE-2019-19015EPSS 3.3%

    An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy (…

  14. 8.1CVE-2019-16387EPSS 1.0%

    PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-privilege account. (This can perform actions and retrieve data that only an admin…

  15. 6.8CVE-2019-16241EPSS 0.5%

    On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a speci…

  16. 9.9CVE-2019-16541EPSS 1.7%

    Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope.

  17. 7.8CVE-2014-0023EPSS 0.4%

    OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution

  18. 7.8CVE-2019-15350EPSS 0.3%

    The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionNam…

  19. 7.8CVE-2019-15349EPSS 0.4%

    The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionNa…

  20. 7.8CVE-2019-15346EPSS 0.3%

    The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, v…

  21. 7.8CVE-2019-15345EPSS 0.3%

    The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, vers…

  22. 7.8CVE-2019-15341EPSS 0.3%

    The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7…

  23. 5.3CVE-2019-18954EPSS 1.2%

    Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can…

  24. 9.8CVE-2008-7291EPSS 1.4%

    gri before 2.12.18 generates temporary files in an insecure way.

  25. 9.1CVE-2007-3915EPSS 1.1%

    Mondo 2.24 has insecure handling of temporary files.

  26. 7.1CVE-2013-4374EPSS 0.3%

    An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.

  27. 5.5CVE-2013-4280EPSS 0.4%

    Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

  28. 5.5CVE-2005-2351EPSS 0.4%

    Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.

  29. 9.1CVE-2009-5042EPSS 1.4%

    python-docutils allows insecure usage of temporary files

  30. 6.5CVE-2019-4306EPSS 1.0%

    IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-For…

  31. 6.8CVE-2019-13546EPSS 0.4%

    In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked application screen, or an authorized remote d…

  32. 5.5CVE-2019-12660EPSS 0.3%

    A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device. The vulnerability is due to improper input validation and authorization of spe…

  33. 4.3CVE-2019-16518EPSS 0.6%

    An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large powe…

  34. 7.5CVE-2019-15138EPSS 1.8%

    The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.

  35. 5.3CVE-2016-11010EPSS 1.8%

    The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.

  36. 5.3CVE-2016-11009EPSS 1.8%

    The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.

  37. 5.3CVE-2016-11008EPSS 1.8%

    The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.

  38. 5.3CVE-2016-11007EPSS 2.0%

    The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.

  39. 5.3CVE-2016-11006EPSS 1.8%

    The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.

  40. 5.5CVE-2018-20947EPSS 0.4%

    cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).

  41. 8.8CVE-2016-10840EPSS 2.1%

    cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

  42. 4.3CVE-2019-10365EPSS 0.3%

    Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

  43. 4.7CVE-2019-11728EPSS 1.1%

    The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox < 68.

  44. 5.5CVE-2019-3970EPSS 0.4%

    Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing…

  45. 8.8CVE-2019-13379EPSS 2.9%

    On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using t…

  46. 9.8CVE-2019-9186EPSS 4.5%

    In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of li…

  47. 7.5CVE-2019-3569EPSS 1.5%

    HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects…

  48. 9.8CVE-2019-12929EPSS 4.9%

    The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening serv…

  49. 9.8CVE-2019-12928ExploitEPSS 23%

    The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to t…

  50. 9.3CVE-2019-1848EPSS 0.7%

    A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restrictio…