cve.bz

CWE-862: Missing Authorization, page 195

Filter

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

What the weakness is: CWE-862 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-665 Exploitation of Thunderbolt Protection Flaws Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-862, as MITRE names them. Credits.

Ask an AI about CWE-862

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-862: Missing Authorization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/862.html and https://cve.bz/cve/cwe/862?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-33901EPSS 0.09%

    In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  2. 5.5CVE-2023-33900EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  3. 5.5CVE-2023-33899EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  4. 5.5CVE-2023-33898EPSS 0.2%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  5. 5.5CVE-2023-33895EPSS 0.10%

    In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  6. 5.5CVE-2023-33894EPSS 0.10%

    In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  7. 5.5CVE-2023-33893EPSS 0.10%

    In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  8. 5.5CVE-2023-33892EPSS 0.10%

    In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  9. 5.5CVE-2023-33891EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  10. 5.5CVE-2023-33890EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  11. 5.5CVE-2023-33889EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  12. 5.5CVE-2023-33888EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  13. 5.5CVE-2023-33887EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  14. 5.5CVE-2023-33886EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  15. 5.5CVE-2023-33885EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  16. 5.5CVE-2023-33884EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  17. 5.5CVE-2023-33883EPSS 0.10%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  18. 5.5CVE-2023-33882EPSS 0.1%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  19. 5.5CVE-2023-33881EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  20. 3.3CVE-2023-33880EPSS 0.10%

    In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  21. 3.3CVE-2023-33879EPSS 0.10%

    In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  22. 5.5CVE-2023-32789EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  23. 5.5CVE-2023-32788EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  24. 5.5CVE-2023-30942EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  25. 5.5CVE-2023-30941EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  26. 5.5CVE-2023-30940EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  27. 5.5CVE-2023-30939EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  28. 5.5CVE-2023-30938EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  29. 5.5CVE-2023-30937EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  30. 5.5CVE-2023-30936EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  31. 5.5CVE-2023-30935EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  32. 5.5CVE-2023-30934EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  33. 5.5CVE-2023-30933EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  34. 5.5CVE-2023-30932EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  35. 5.5CVE-2023-30931EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  36. 5.5CVE-2023-30930EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  37. 7.8CVE-2023-30929EPSS 0.09%

    In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  38. 7.8CVE-2023-30928EPSS 0.09%

    In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  39. 5.5CVE-2023-30927EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  40. 5.5CVE-2023-30926EPSS 0.08%

    In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  41. 5.5CVE-2023-30925EPSS 0.08%

    In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  42. 5.5CVE-2023-30924EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  43. 5.5CVE-2023-30923EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  44. 5.5CVE-2023-30922EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  45. 5.5CVE-2023-30921EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  46. 5.5CVE-2023-30920EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  47. 5.5CVE-2023-30919EPSS 0.08%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  48. 5.5CVE-2023-30918EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  49. 7.8CVE-2023-30917EPSS 0.09%

    In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  50. 7.8CVE-2023-30916EPSS 0.09%

    In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.