CWE-863: Incorrect Authorization, page 74

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 6.8CVE-2022-4349EPSS 0.3%2022-12-08

   A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file delete.html. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exp…

2. 8.8CVE-2022-46792EPSS 0.9%2022-12-08

   Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.)

3. 9.8CVE-2022-46169KEVExploitEPSS 99.8%2022-12-05

   Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbit…

4. 9.8CVE-2022-44039EPSS 1.1%2022-12-05

   Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files like [system.conf] and [passwd], this occurs because the insecure…

5. 9.8CVE-2022-43515EPSS 1.3%2022-12-05

   Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained a…

6. 8.8CVE-2022-46167EPSS 0.9%2022-12-02

   Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with `PATCH` capabilities on its own Namespace, is able to edit it and remove the O…

7. 5.3CVE-2022-41970EPSS 0.6%2022-12-01

   Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and previews of documents (first page) can be d…

8. 6.5CVE-2022-24189EPSS 0.5%2022-11-28

   The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented properly. Removing the value causes all requests to succeed, bypassing authorization and session management. The impact of this vu…

9. 4.3CVE-2022-41944EPSS 0.5%2022-11-28

   Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. …

10. 8.8CVE-2022-4090EPSS 0.3%2022-11-24

    A vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unknown processing of the file us_transac.php?action=add. The manipulation leads to cross-site request forgery. The attack m…

11. 9.8CVE-2022-41923EPSS 1.9%2022-11-23

    Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor…

12. 7.5CVE-2022-36785EPSS 2.1%2022-11-17

    D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. *Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" htt…

13. 4.3CVE-2022-4014EPSS 0.2%2022-11-16

    A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack m…

14. 8.8CVE-2022-4013EPSS 0.3%2022-11-16

    A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can…

15. 6.3CVE-2022-41918EPSS 0.5%2022-11-15

    OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are…

16. 5.8CVE-2022-20928EPSS 0.8%2022-11-15

    A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish …

17. 6.5CVE-2022-45383EPSS 0.7%2022-11-15

    An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users w…

18. 7.5CVE-2022-42978EPSS 0.9%2022-11-15

    In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on the remote system.

19. 6.5CVE-2022-39385EPSS 0.6%2022-11-14

    Discourse is the an open source discussion platform. In some rare cases users redeeming an invitation can be added as a participant to several private message topics that they should not be added to. They are not notified of this, it happe…

20. 4.3CVE-2022-3978EPSS 0.4%2022-11-13

    A vulnerability, which was classified as problematic, was found in NodeBB up to 2.5.7. This affects an unknown part of the file /register/abort. The manipulation leads to cross-site request forgery. It is possible to initiate the attack re…

21. 3.5CVE-2022-39388EPSS 0.5%2022-11-10

    Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3, a user can impersonate any workload identity within the service mesh if they have localhost access to the Istiod cont…

22. 4.3CVE-2022-3819EPSS 0.5%2022-11-10

    An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a malicious users to set emojis on internal notes they don't have access to.

23. 5.4CVE-2022-41091KEVEPSS 1.9%2022-11-09

    Windows Mark of the Web Security Feature Bypass Vulnerability

24. 9.8CVE-2022-39352EPSS 0.5%2022-11-08

    OpenFGA is a high-performance authorization/permission engine inspired by Google Zanzibar. Versions prior to 0.2.5 are vulnerable to authorization bypass under certain conditions. You are affected by this vulnerability if you added a tuple…

25. 6.5CVE-2022-20942EPSS 1.1%2022-11-04

    A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an authent…

26. 5.5CVE-2022-42788EPSS 0.3%2022-11-01

    A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information.

27. 9.8CVE-2022-39322EPSS 1.5%2022-10-25

    @keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their `multiselect` fields to use the field-level access control - if co…

28. 8.8CVE-2022-42344EPSS 1.3%2022-10-20

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposu…

29. 4.3CVE-2022-3585EPSS 0.3%2022-10-18

    A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to…

30. 3.5CVE-2022-3582EPSS 0.4%2022-10-18

    A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to…

31. 7.5CVE-2022-42975EPSS 0.6%2022-10-17

    socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.

32. 5.4CVE-2022-39302EPSS 0.5%2022-10-14

    Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to an…

33. 4.3CVE-2022-42724EPSS 0.5%2022-10-10

    app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information that only the site admin should have).

34. 7.5CVE-2022-41574EPSS 0.8%2022-10-07

    An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact addres…

35. 8.8CVE-2022-36634EPSS 1.2%2022-10-07

    An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.

36. 4.3CVE-2022-39275EPSS 0.8%2022-10-06

    Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. Th…

37. 4.4CVE-2022-31252EPSS 0.1%2022-10-06

    A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with acces…

38. 4.3CVE-2021-40692EPSS 0.6%2022-09-29

    Insufficient capability checks made it possible for teachers to download users outside of their courses.

39. 5.3CVE-2022-39031EPSS 0.7%2022-09-28

    Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.

40. 7.5CVE-2022-39030EPSS 0.9%2022-09-28

    smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.

41. 6.5CVE-2022-39029EPSS 0.8%2022-09-28

    Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.

42. 6.5CVE-2022-40816EPSS 0.8%2022-09-27

    Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web…

43. 6.8CVE-2022-3048EPSS 0.4%2022-09-26

    Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigation restrictions via physical access to the device.

44. 5.4CVE-2022-3024EPSS 0.3%2022-09-26

    The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds. Furthermore, due to the lack …

45. 7.5CVE-2022-39958EPSS 1.2%2022-09-20

    The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and undetectable sections of data by repeatedly submitting an HTTP Range header field with a small byte range. A restricted re…

46. 9.8CVE-2022-39956EPSS 1.2%2022-09-20

    The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-Transfer-Encoding m…

47. 9.8CVE-2022-39955EPSS 1.4%2022-09-20

    The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially b…

48. 9.8CVE-2022-0143EPSS 0.7%2022-09-19

    When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remo…

49. 7.5CVE-2022-36074EPSS 0.8%2022-09-15

    Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure a…

50. 8.8CVE-2022-36103EPSS 0.7%2022-09-13

    Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR (certificate signin…