CWE-863: Incorrect Authorization, page 65

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 3.5CVE-2023-3511EPSS 0.4%2023-12-15

   An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and …

2. 8.2CVE-2023-6837EPSS 0.5%2023-12-15

   Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following conditions must be met: * An IDP configure…

3. 8.8CVE-2023-45185EPSS 1.0%2023-12-14

   IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IB…

4. 4.3CVE-2023-50777EPSS 0.3%2023-12-13

   Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

5. 8.1CVE-2023-47320EPSS 0.7%2023-12-13

   Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes t…

6. 5.4CVE-2023-49273EPSS 0.4%2023-12-12

   Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10…

7. 4.3CVE-2023-48227EPSS 0.4%2023-12-12

   Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.3.0, Backoffice users with send for approval permission but not publish permission are able to publish in some s…

8. 8.8CVE-2020-10676EPSS 1.0%2023-12-12

   In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project.

9. 7.1CVE-2023-6542EPSS 0.2%2023-12-12

   Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful …

10. 8.8CVE-2023-36646EPSS 0.8%2023-12-12

    Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.

11. 4.3CVE-2023-50457EPSS 0.4%2023-12-10

    An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions.

12. 8.8CVE-2023-48859EPSS 1.2%2023-12-06

    TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

13. 7.5CVE-2023-49246EPSS 0.4%2023-12-06

    Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

14. 7.5CVE-2023-49240EPSS 0.4%2023-12-06

    Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.

15. 7.5CVE-2023-49239EPSS 0.4%2023-12-06

    Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

16. 6.8CVE-2023-42575EPSS 0.4%2023-12-05

    Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

17. 3.3CVE-2023-42569EPSS 0.2%2023-12-05

    Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.

18. 7.8CVE-2023-33071EPSS 0.1%2023-12-05

    Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

19. 9.8CVE-2023-24052EPSS 0.9%2023-12-04

    An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password.

20. 9.8CVE-2023-24051EPSS 0.9%2023-12-04

    A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks.

21. 6.8CVE-2023-24047EPSS 0.4%2023-12-04

    An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm.

22. 7.5CVE-2023-49947EPSS 0.6%2023-12-03

    Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.

23. 5.5CVE-2023-42006EPSS 0.2%2023-12-01

    IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266.

24. 7.5CVE-2023-5995EPSS 0.6%2023-12-01

    An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the p…

25. 3.1CVE-2023-4658EPSS 0.5%2023-12-01

    An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the `…

26. 4.3CVE-2023-4317EPSS 0.4%2023-12-01

    An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a user with the Developer role…

27. 4.3CVE-2023-3964EPSS 0.5%2023-12-01

    An issue has been discovered in GitLab affecting all versions starting from 13.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for users to access composer pack…

28. 4.3CVE-2023-3443EPSS 0.4%2023-12-01

    An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji …

29. 7.5CVE-2023-47827EPSS 0.5%2023-11-30

    Incorrect Authorization vulnerability in NicheAddons Events Addon for Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Events Addon for Elementor: from n/a through 2.1.3.

30. 8.8CVE-2023-40610EPSS 1.3%2023-11-27

    Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata datab…

31. 8.8CVE-2023-48712EPSS 0.7%2023-11-24

    Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limited users can impersonate another user's account if only sin…

32. 6.8CVE-2023-5553EPSS 0.3%2023-11-21

    During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this prote…

33. 5.4CVE-2023-5799EPSS 0.5%2023-11-20

    The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them

34. 5.4CVE-2023-5509EPSS 0.5%2023-11-20

    The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

35. 5.3CVE-2023-48309EPSS 0.7%2023-11-20

    NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affected by a vulnerability. A bad actor could create an empty/mock user, by getting ho…

36. 5.3CVE-2023-48218EPSS 0.6%2023-11-20

    The Strapi Protected Populate Plugin protects `get` endpoints from revealing too much information. Prior to version 1.3.4, users were able to bypass the field level security. Users who tried to populate something that they didn't have acce…

37. 5.3CVE-2023-3379EPSS 0.2%2023-11-20

    Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.

38. 7.2CVE-2023-45626EPSS 0.9%2023-11-14

    An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.

39. 7.1CVE-2022-40681EPSS 0.2%2023-11-14

    A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe.

40. 7.5CVE-2023-43901EPSS 0.5%2023-11-14

    Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.

41. 8.0CVE-2023-31403EPSS 0.4%2023-11-14

    SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in th…

42. 4.3CVE-2023-47037EPSS 1.5%2023-11-12

    We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.  Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG …

43. 7.5CVE-2023-4379EPSS 0.6%2023-11-09

    An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

44. 8.8CVE-2023-46244EPSS 0.8%2023-11-07

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a user to write a script in which any velocity content is executed with the right of any other …

45. 5.3CVE-2023-42553EPSS 0.4%2023-11-07

    Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email.

46. 5.3CVE-2023-42541EPSS 0.4%2023-11-07

    Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.

47. 4.3CVE-2023-5352EPSS 0.4%2023-11-06

    The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.

48. 9.9CVE-2023-20048EPSS 20%2023-11-01

    A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) devi…

49. 7.5CVE-2023-46992EPSS 0.7%2023-10-31

    TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.

50. 9.8CVE-2023-22518KEVExploitEPSS >99.9%2023-10-31

    All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrat…