CWE-863: Incorrect Authorization, page 64

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 5.4CVE-2024-21987EPSS 0.3%2024-02-16

   SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings

2. 5.5CVE-2024-0017EPSS 0.1%2024-02-16

   In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed fo…

3. 6.5CVE-2024-1482EPSS 0.4%2024-02-14

   An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUB_TOKEN. T…

4. 5.5CVE-2024-24966EPSS 0.2%2024-02-14

   When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

5. 5.4CVE-2023-6152EPSS 1.4%2024-02-13

   A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.

6. 8.8CVE-2024-24751EPSS 0.5%2024-02-13

   sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected versions the existing access control check for events in the backend module got broken during the update of the extens…

7. 7.5CVE-2024-23833EPSS 1.0%2024-02-12

   OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefine(version<=3.7.7) where an attacker may construct a JDBC query which may read files on the host files…

8. 8.8CVE-2024-25108EPSS 0.7%2024-02-12

   Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative a…

9. 9.8CVE-2023-6036EPSS 1.8%2024-02-12

   The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authen…

10. 4.1CVE-2024-24774EPSS 0.5%2024-02-09

    Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira being able to create webhooks that give t…

11. 8.1CVE-2023-51761EPSS 0.7%2024-02-09

    In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.

12. 9.1CVE-2023-43609EPSS 0.5%2024-02-09

    In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.

13. 6.5CVE-2023-6564EPSS 0.4%2024-02-08

    An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which sub…

14. 8.8CVE-2024-24824EPSS 35%2024-02-07

    Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the `/api/system/cluster_config/` endpoint. …

15. 4.6CVE-2024-20828EPSS 0.2%2024-02-06

    Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.

16. 5.3CVE-2023-6963EPSS 0.5%2024-02-05

    The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block b…

17. 6.5CVE-2024-22208EPSS 0.7%2024-02-05

    phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large …

18. 6.5CVE-2023-32967EPSS 0.3%2024-02-02

    An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. QTS 5.x, QuT…

19. 8.8CVE-2023-47142EPSS 0.3%2024-02-02

    IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.

20. 8.8CVE-2024-24573EPSS 0.8%2024-01-31

    facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileMana…

21. 9.8CVE-2024-23653EPSS 3.4%2024-01-31

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based o…

22. 7.8CVE-2024-22938EPSS 0.3%2024-01-30

    Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component.

23. 7.5CVE-2024-23629EPSS 1.1%2024-01-26

    An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.

24. 6.5CVE-2023-35836EPSS 0.3%2024-01-23

    An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon suc…

25. 4.3CVE-2023-49783EPSS 0.3%2024-01-23

    Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records expos…

26. 5.3CVE-2023-44401EPSS 0.4%2024-01-23

    The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results wh…

27. 6.5CVE-2024-23675EPSS 0.4%2024-01-22

    In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of K…

28. 3.7CVE-2024-23329EPSS 0.6%2024-01-19

    changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint `/api/v1/watch/<uuid>/history` can be accessed by any unauthorized user. As a result any unauthorized user ca…

29. 4.3CVE-2022-0775EPSS 0.7%2024-01-16

    The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

30. 7.5CVE-2023-52111EPSS 0.3%2024-01-16

    Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.

31. 8.8CVE-2023-5356EPSS 0.8%2024-01-12

    Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integr…

32. 5.3CVE-2023-4812EPSS 0.5%2024-01-12

    An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypa…

33. 5.5CVE-2023-41994EPSS 0.2%2024-01-10

    A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission.

34. 6.5CVE-2024-21736EPSS 0.3%2024-01-09

    SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading…

35. 7.2CVE-2024-21735EPSS 0.4%2024-01-09

    SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. This could allow an attacker with high privileges to perform unintended actions, r…

36. 4.9CVE-2023-46906EPSS 0.7%2024-01-09

    juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.

37. 5.5CVE-2023-41779EPSS 0.2%2024-01-03

    There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.

38. 9.8CVE-2023-52077EPSS 0.7%2023-12-27

    Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps using tokens issued by administrators and moderators to call admin APIs. This allows malicious third-p…

39. 7.6CVE-2023-5644EPSS 0.5%2023-12-26

    The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users.

40. 8.1CVE-2023-49949EPSS 0.6%2023-12-26

    Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.

41. 4.3CVE-2023-51649EPSS 0.5%2023-12-22

    Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitting a Job to run via a Job Button, only the model-level `ext…

42. 7.5CVE-2022-39337EPSS 1.1%2023-12-22

    Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can b…

43. 4.3CVE-2023-51380EPSS 0.5%2023-12-21

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and …

44. 4.9CVE-2023-51379EPSS 0.6%2023-12-21

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content a…

45. 6.3CVE-2023-50732EPSS 0.5%2023-12-21

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute a Velocity script without script right through the document tree. This has been patched in XWiki 14.10.7 and …

46. 4.4CVE-2023-7047EPSS 0.2%2023-12-21

    Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution r…

47. 5.3CVE-2023-50705EPSS 0.5%2023-12-20

    An attacker could create malicious requests to obtain sensitive information about the web server.

48. 6.5CVE-2023-49734EPSS 0.9%2023-12-19

    An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affe…

49. 6.8CVE-2023-6355EPSS 0.4%2023-12-18

    Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in…

50. 8.2CVE-2023-41314EPSS 0.9%2023-12-18

    The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues.