CWE-863: Incorrect Authorization, page 73

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 8.8CVE-2023-22482EPSS 0.9%2023-01-26

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6, and 2.6.0-rc-3 are vulnerable to an improper authorization bug causing the API to accep…

2. 6.5CVE-2023-21719EPSS 1.7%2023-01-24

   Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

3. 6.5CVE-2023-20018EPSS 0.6%2023-01-20

   A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficien…

4. 9.8CVE-2022-23739EPSS 1.3%2023-01-17

   An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API requests from GitHub Apps. This vulnerability allowed an app installed on an organization to gain acc…

5. 8.1CVE-2022-45353EPSS 0.5%2023-01-14

   Broken Access Control in Betheme theme <= 26.6.1 on WordPress.

6. 6.5CVE-2023-0298EPSS 0.6%2023-01-14

   Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

7. 9.8CVE-2023-22480ExploitEPSS 67%2023-01-14

   KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, deploy and operate production-level K8s clusters. In KubeOperator versions 3.16.3 and below, API interfaces with unauthorized entities and can leak…

8. 3.8CVE-2023-0091EPSS 0.5%2023-01-13

   A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.

9. 7.1CVE-2022-2155EPSS 0.4%2023-01-12

   A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. …

10. 7.5CVE-2022-4167EPSS 0.6%2023-01-12

    Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to rev…

11. 4.3CVE-2023-22945EPSS 0.5%2023-01-11

    In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.

12. 6.6CVE-2023-21560EPSS 1.2%2023-01-10

    Windows Boot Manager Security Feature Bypass Vulnerability

13. 6.5CVE-2023-0133EPSS 0.6%2023-01-10

    Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium)

14. 6.5CVE-2015-10033EPSS 0.8%2023-01-09

    A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e…

15. 6.5CVE-2022-46258EPSS 0.6%2023-01-09

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to modify Action Workflow files without a Workflow scope. The Create or Update file contents …

16. 8.8CVE-2022-43438EPSS 0.8%2023-01-03

    The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, …

17. 7.5CVE-2022-23553EPSS 0.9%2022-12-28

    Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

18. 9.8CVE-2021-45466EPSS 55%2022-12-26

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the /resources/ folder.

19. 9.1CVE-2022-45891EPSS 0.8%2022-12-25

    Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList).

20. 6.5CVE-2022-38475EPSS 0.5%2022-12-22

    An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.

21. 6.5CVE-2022-22754EPSS 0.7%2022-12-22

    If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions. This vulnerability affects Firefox < 97, …

22. 8.8CVE-2020-36625EPSS 0.4%2022-12-22

    A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery. The attack may be initiated remot…

23. 5.3CVE-2022-3188EPSS 0.6%2022-12-21

    Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the lates…

24. 8.8CVE-2021-4275EPSS 0.3%2022-12-21

    A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name o…

25. 5.3CVE-2022-23551EPSS 0.8%2022-12-21

    aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this …

26. 8.8CVE-2021-4268EPSS 0.4%2022-12-21

    A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to…

27. 6.5CVE-2020-36623EPSS 0.3%2022-12-21

    A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file src/index.js. The manipulation leads to cross-site request forgery. The attack can be launched remot…

28. 6.5CVE-2020-36622EPSS 0.3%2022-12-21

    A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The name of the patch is …

29. 5.3CVE-2022-43872EPSS 0.5%2022-12-20

    IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

30. 7.5CVE-2022-46076EPSS 1.2%2022-12-20

    D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.

31. 7.5CVE-2022-23488EPSS 0.6%2022-12-17

    BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensitive Information Into Sent Data. The moderators-only webcams lock setting is not enforced on the backend, which allows …

32. 4.3CVE-2022-23490EPSS 0.5%2022-12-16

    BigBlueButton is an open source web conferencing system. Versions prior to 2.4.0 expose sensitive information to Unauthorized Actors. This issue affects meetings with polls, where the attacker is a meeting participant. Subscribing to the c…

33. 4.3CVE-2022-42351EPSS 1.0%2022-12-16

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level…

34. 3.3CVE-2022-20558EPSS 0.1%2022-12-16

    In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User …

35. 2.7CVE-2022-41962EPSS 0.7%2022-12-16

    BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6, and 2.5-alpha-1 contain Incorrect Authorization for setting emoji status. A user with moderator rights can use the clear status feature to set any emoji s…

36. 7.2CVE-2022-23741EPSS 1.2%2022-12-14

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a …

37. 4.3CVE-2022-46160EPSS 0.5%2022-12-13

    Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations are not properly verified when accessing the project "homepage"/dashboards. Use…

38. 4.3CVE-2022-23473EPSS 0.5%2022-12-13

    Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only…

39. 6.5CVE-2022-41274EPSS 0.6%2022-12-13

    SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can…

40. 6.5CVE-2022-3883EPSS 0.3%2022-12-12

    The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it …

41. 6.5CVE-2022-3882EPSS 0.3%2022-12-12

    The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it a…

42. 5.7CVE-2022-3881EPSS 0.5%2022-12-12

    The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Log WordPress plugin before 3.43 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticate…

43. 6.5CVE-2022-3880EPSS 0.4%2022-12-12

    The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4.20 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber…

44. 6.5CVE-2022-3879EPSS 0.4%2022-12-12

    The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and acti…

45. 5.3CVE-2022-45956EPSS 0.9%2022-12-12

    Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

46. 8.8CVE-2022-45760EPSS 0.6%2022-12-12

    SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

47. 6.5CVE-2022-4397EPSS 0.3%2022-12-10

    A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-sit…

48. 3.3CVE-2022-39914EPSS 0.1%2022-12-08

    Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T(13) allows local attacker to access connected DLNA device information.

49. 3.3CVE-2022-39913EPSS 0.1%2022-12-08

    Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attacker to access user profiles information.

50. 3.3CVE-2022-39903EPSS 0.1%2022-12-08

    Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number.