CWE-863: Incorrect Authorization, page 66

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 7.5CVE-2023-45899EPSS 0.9%2023-10-31

   An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.

2. 5.7CVE-2023-46139EPSS 0.2%2023-10-31

   KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root priv…

3. 7.8CVE-2023-21390EPSS 0.1%2023-10-30

   In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit…

4. 6.5CVE-2023-47090EPSS 0.8%2023-10-30

   NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each…

5. 5.5CVE-2023-21311EPSS 0.09%2023-10-30

   In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not…

6. 7.8CVE-2023-40117EPSS 0.1%2023-10-27

   In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

7. 5.3CVE-2023-46754EPSS 0.4%2023-10-26

   The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.

8. 5.9CVE-2023-46753EPSS 0.9%2023-10-26

   An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

9. 5.5CVE-2023-41077EPSS 0.3%2023-10-25

   An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks.

10. 6.5CVE-2023-46125EPSS 0.9%2023-10-25

    Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows users to retrieve its c…

11. 8.8CVE-2023-43961EPSS 1.0%2023-10-25

    An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

12. 6.5CVE-2023-43508EPSS 0.5%2023-10-25

    Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of the…

13. 8.8CVE-2021-4334EPSS 0.7%2023-10-20

    The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check on the fpd_update_options function in versions up to, and including, 4.6.9. This makes it possible…

14. 8.1CVE-2020-36714EPSS 0.5%2023-10-20

    The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to ac…

15. 9.8CVE-2023-34051EPSS 48%2023-10-20

    VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

16. 5.3CVE-2023-22067EPSS 1.1%2023-10-17

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 an…

17. 9.8CVE-2023-43119EPSS 0.8%2023-10-16

    An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

18. 6.5CVE-2023-29484EPSS 0.4%2023-10-16

    In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.

19. 8.8CVE-2023-38218EPSS 0.9%2023-10-13

    Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Incorrect Authorization . An authenticated attacker can exploit this to achieve information exp…

20. 7.5CVE-2023-40829EPSS 0.6%2023-10-12

    There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000.

21. 4.3CVE-2023-41882EPSS 0.5%2023-10-11

    vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaborati…

22. 4.4CVE-2023-35653EPSS 0.09%2023-10-11

    In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

23. 5.4CVE-2023-28635EPSS 0.5%2023-10-11

    vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this …

24. 9.8CVE-2023-5521EPSS 0.7%2023-10-11

    Incorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9.

25. 8.8CVE-2023-36556EPSS 1.1%2023-10-10

    An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via…

26. 7.5CVE-2023-44860EPSS 23%2023-10-06

    An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.

27. 7.5CVE-2022-3248EPSS 0.5%2023-10-05

    A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.

28. 8.1CVE-2023-1832EPSS 0.6%2023-10-04

    An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.

29. 8.8CVE-2023-4997EPSS 0.6%2023-10-04

    Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.

30. 7.5CVE-2023-5106EPSS 0.6%2023-10-02

    An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through…

31. 5.4CVE-2023-5195EPSS 0.5%2023-09-29

    Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of

32. 4.3CVE-2023-5194EPSS 0.4%2023-09-29

    Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager

33. 2.7CVE-2023-5193EPSS 0.6%2023-09-29

    Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation.

34. 2.7CVE-2023-5159EPSS 0.4%2023-09-29

    Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots.

35. 4.3CVE-2023-5198EPSS 0.5%2023-09-29

    An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to prote…

36. 4.3CVE-2023-4532EPSS 0.5%2023-09-29

    An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of priva…

37. 4.3CVE-2023-3979EPSS 0.5%2023-09-29

    An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collabor…

38. 4.3CVE-2023-3920EPSS 0.5%2023-09-29

    An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that a maintainer to create a for…

39. 5.5CVE-2023-41078EPSS 0.3%2023-09-27

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences.

40. 3.3CVE-2023-35990EPSS 0.3%2023-09-27

    The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed.

41. 8.1CVE-2023-4853EPSS 1.4%2023-09-20

    A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass th…

42. 7.5CVE-2022-47553EPSS 0.8%2023-09-19

    Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server.

43. 9.8CVE-2023-5009EPSS 9.7%2023-09-19

    An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled secu…

44. 7.1CVE-2023-4814EPSS 0.2%2023-09-14

    A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to.

45. 7.5CVE-2023-20191EPSS 0.6%2023-09-13

    A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to in…

46. 5.3CVE-2023-20190EPSS 0.7%2023-09-13

    A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. Th…

47. 4.3CVE-2023-40611EPSS 1.7%2023-09-12

    Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configurat…

48. 8.8CVE-2023-37881EPSS 0.6%2023-09-12

    Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.

49. 9.8CVE-2023-40309EPSS 0.9%2023-09-12

    SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of…

50. 7.5CVE-2023-30995EPSS 0.9%2023-09-08

    IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.