CWE-863: Incorrect Authorization, page 60

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 9.1CVE-2024-2743EPSS 0.4%2024-09-12

   An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacker to modify an on-demand DAST scan without permissions and leak variables.

2. 5.3CVE-2024-8691EPSS 0.3%2024-09-11

   A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is…

3. 5.8CVE-2024-4465EPSS 0.2%2024-09-11

   An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with reporting privileges learns how to create…

4. 8.0CVE-2024-44667EPSS 0.5%2024-09-10

   Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root…

5. 7.1CVE-2024-42423EPSS 0.2%2024-09-10

   Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerabi…

6. 7.5CVE-2024-6979EPSS 0.3%2024-09-10

   Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more privileges than designed. The risk of exploitation is very low as …

7. 2.7CVE-2024-44114EPSS 0.3%2024-09-10

   SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiality of the application.

8. 8.7CVE-2024-8601EPSS 0.5%2024-09-09

   This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter thr…

9. 3.3CVE-2024-34652EPSS 0.1%2024-09-04

   Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage.

10. 5.5CVE-2024-34651EPSS 0.1%2024-09-04

    Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files.

11. 3.3CVE-2024-34650EPSS 0.1%2024-09-04

    Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel.

12. 4.6CVE-2024-34642EPSS 0.2%2024-09-04

    Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.

13. 9.1CVE-2024-45588EPSS 0.4%2024-09-03

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by m…

14. 9.1CVE-2024-45587EPSS 0.4%2024-09-03

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerabil…

15. 9.2CVE-2024-45586EPSS 0.4%2024-09-03

    This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerabili…

16. 6.5CVE-2024-45509EPSS 0.4%2024-09-01

    In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.

17. 8.3CVE-2024-38868EPSS 0.8%2024-08-30

    Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

18. 8.1CVE-2024-41964EPSS 0.5%2024-08-29

    Kirby is a CMS targeting designers and editors. Kirby allows to restrict the permissions of specific user roles. Users of that role can only perform permitted actions. Permissions for creating and deleting languages have already existed an…

19. 6.3CVE-2024-43954EPSS 0.3%2024-08-29

    Incorrect Authorization vulnerability in Themeum Droip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Droip: from n/a through 1.1.1.

20. 5.3CVE-2024-45043EPSS 0.5%2024-08-28

    The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the records received based on the configured record type. `awsfirehosereceiver` allows unauthenticated…

21. 6.4CVE-2024-45037EPSS 0.3%2024-08-27

    The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a cust…

22. 2.0CVE-2024-8011EPSS 0.1%2024-08-25

    Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera.

23. 5.4CVE-2024-38869EPSS 1.1%2024-08-23

    Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

24. 9.1CVE-2024-42773EPSS 0.5%2024-08-22

    An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.

25. 4.3CVE-2024-3127EPSS 0.4%2024-08-22

    An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 17.1.6, all versions starting from 17.2 before 17.2.4, all versions starting from 17.3 before 17.3.1. Under certain conditions it may be possible to…

26. 4.3CVE-2024-7836EPSS 0.3%2024-08-22

    The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated atta…

27. 4.9CVE-2024-20466EPSS 0.5%2024-08-21

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper …

28. 7.8CVE-2024-7604EPSS 0.3%2024-08-21

    Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is…

29. 5.3CVE-2024-7711EPSS 0.5%2024-08-20

    An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was only exploitable inside a public reposit…

30. 5.9CVE-2024-6337EPSS 0.7%2024-08-20

    An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only content: read and pull_request_write: write permissions to read issue content inside a private repository. This was onl…

31. 8.8CVE-2024-31842EPSS 0.4%2024-08-20

    An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user inside GET requests. The query string for the URL could be saved in the browser's history, passed through Referers to o…

32. 8.8CVE-2024-39690EPSS 0.5%2024-08-20

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference f…

33. 6.5CVE-2024-43250EPSS 0.3%2024-08-19

    Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.

34. 9.8CVE-2024-42966EPSS 0.6%2024-08-15

    Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.

35. 8.1CVE-2024-7624EPSS 0.4%2024-08-15

    The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enabl…

36. 3.9CVE-2021-26387EPSS 0.1%2024-08-13

    Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.

37. 7.5CVE-2024-43131EPSS 0.5%2024-08-13

    Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlis…

38. 5.3CVE-2024-41941EPSS 0.3%2024-08-13

    A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the app…

39. 8.7CVE-2024-41939EPSS 0.5%2024-08-13

    A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges o…

40. 9.8CVE-2024-42473EPSS 0.5%2024-08-12

    OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses `but not` and `from` expressions and a userset. Users should downgrade to v1.5.6 …

41. 7.1CVE-2024-7266EPSS 0.3%2024-08-07

    Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD R…

42. 8.7CVE-2024-7265EPSS 0.5%2024-08-07

    Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. …

43. 7.2CVE-2024-42062EPSS 0.9%2024-08-07

    CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integ…

44. 4.3CVE-2024-7004EPSS 0.4%2024-08-06

    Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious fil…

45. 8.8CVE-2024-6358EPSS 0.3%2024-08-06

    Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.

46. 9.8CVE-2024-6202EPSS 0.5%2024-08-06

    HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate arbitrary HaloITSM users by just knowing their email address. …

47. 9.8CVE-2024-6782ExploitEPSS 84%2024-08-06

    Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

48. 7.5CVE-2024-40530EPSS 0.4%2024-08-05

    A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header.

49. 9.8CVE-2024-38856KEVExploitEPSS 99.4%2024-08-05

    Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of sc…

50. 7.8CVE-2024-38884EPSS 0.2%2024-08-02

    An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard…