cve.bz

CWE-862: Missing Authorization, page 188

Filter

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

What the weakness is: CWE-862 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-665 Exploitation of Thunderbolt Protection Flaws Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-862, as MITRE names them. Credits.

Ask an AI about CWE-862

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-862: Missing Authorization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/862.html and https://cve.bz/cve/cwe/862?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-46354EPSS 0.6%

    In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from…

  2. 7.5CVE-2023-44113EPSS 0.4%

    Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality.

  3. 7.8CVE-2023-40094EPSS 0.1%

    In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera…

  4. 7.8CVE-2023-40089EPSS 0.1%

    In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege wit…

  5. 6.7CVE-2023-32855EPSS 0.1%

    In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  6. 5.5CVE-2023-42749EPSS 0.09%

    In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  7. 7.8CVE-2023-42748EPSS 0.10%

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  8. 7.8CVE-2023-42747EPSS 0.10%

    In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  9. 7.8CVE-2023-42746EPSS 0.10%

    In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  10. 7.8CVE-2023-42745EPSS 0.10%

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  11. 5.5CVE-2023-42744EPSS 0.09%

    In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

  12. 7.8CVE-2023-42743EPSS 0.10%

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  13. 5.5CVE-2023-42742EPSS 0.09%

    In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

  14. 5.5CVE-2023-42741EPSS 0.09%

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  15. 7.8CVE-2023-42740EPSS 0.10%

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  16. 7.8CVE-2023-42739EPSS 0.10%

    In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  17. 7.8CVE-2023-42738EPSS 0.10%

    In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  18. 5.5CVE-2023-42737EPSS 0.09%

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  19. 7.8CVE-2023-42736EPSS 0.10%

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  20. 4.4CVE-2023-42735EPSS 0.1%

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed

  21. 5.5CVE-2023-42734EPSS 0.10%

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  22. 5.5CVE-2023-42733EPSS 0.10%

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  23. 5.5CVE-2023-42732EPSS 0.10%

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  24. 5.5CVE-2023-42730EPSS 0.10%

    In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  25. 5.5CVE-2023-42714EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  26. 5.5CVE-2023-42713EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  27. 5.5CVE-2023-42712EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  28. 5.5CVE-2023-42711EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  29. 5.5CVE-2023-42710EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  30. 5.5CVE-2023-42709EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  31. 5.5CVE-2023-42708EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  32. 5.5CVE-2023-42707EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  33. 5.5CVE-2023-42706EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  34. 5.5CVE-2023-42705EPSS 0.10%

    In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  35. 5.5CVE-2023-42704EPSS 0.10%

    In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  36. 5.5CVE-2023-42703EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  37. 5.5CVE-2023-42702EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  38. 5.5CVE-2023-42701EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  39. 5.5CVE-2023-42700EPSS 0.10%

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  40. 5.5CVE-2023-42699EPSS 0.10%

    In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  41. 5.5CVE-2023-42698EPSS 0.10%

    In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  42. 5.5CVE-2023-42697EPSS 0.10%

    In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  43. 7.8CVE-2023-42696EPSS 0.10%

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  44. 7.8CVE-2023-42695EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  45. 7.8CVE-2023-42694EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  46. 7.8CVE-2023-42693EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  47. 7.8CVE-2023-42692EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  48. 7.8CVE-2023-42691EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  49. 7.8CVE-2023-42690EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  50. 7.8CVE-2023-42689EPSS 0.10%

    In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed