CWE-863: Incorrect Authorization, page 75

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 7.1CVE-2022-2990EPSS 0.3%2022-09-13

   An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementa…

2. 7.1CVE-2022-2989EPSS 0.3%2022-09-13

   An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementar…

3. 9.8CVE-2022-37767EPSS 1.5%2022-09-12

   Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary J…

4. 6.3CVE-2022-36109EPSS 1.0%2022-09-09

   Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulat…

5. 8.1CVE-2022-23451EPSS 1.3%2022-09-06

   An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an atta…

6. 5.4CVE-2022-2597EPSS 0.5%2022-09-05

   The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS …

7. 4.9CVE-2022-23452EPSS 1.3%2022-09-01

   An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of ser…

8. 8.8CVE-2022-36051EPSS 1.0%2022-08-31

   ZITADEL combines the ease of Auth0 and the versatility of Keycloak.**Actions**, introduced in ZITADEL **1.42.0** on the API and **1.56.0** for Console, is a feature, where users with role.`ORG_OWNER` are able to create Javascript Code, whi…

9. 7.4CVE-2021-3563EPSS 1.9%2022-08-26

   A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerabili…

10. 4.3CVE-2021-3763EPSS 0.7%2022-08-23

    A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console.…

11. 5.3CVE-2022-35692EPSS 0.8%2022-08-19

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnera…

12. 8.8CVE-2022-36009EPSS 0.8%2022-08-19

    gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of…

13. 7.8CVE-2021-37409EPSS 0.2%2022-08-18

    Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

14. 7.5CVE-2022-1401EPSS 19%2022-08-17

    Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive server files with root permissions. This issue affects: Devic…

15. 8.8CVE-2022-34255EPSS 2.4%2022-08-16

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account cou…

16. 8.8CVE-2020-14321ExploitEPSS 16%2022-08-16

    In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.

17. 7.2CVE-2022-2354EPSS 1.3%2022-08-15

    The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

18. 7.5CVE-2022-35487EPSS 0.8%2022-08-08

    Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attach…

19. 3.3CVE-2022-33718EPSS 0.09%2022-08-05

    An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the list of apps that can use mobile data.

20. 7.5CVE-2022-2501EPSS 1.0%2022-08-05

    An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses …

21. 8.1CVE-2022-2326EPSS 0.9%2022-08-05

    An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through…

22. 4.3CVE-2022-2095EPSS 1.1%2022-08-05

    An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to…

23. 6.5CVE-2022-27551EPSS 0.5%2022-08-03

    HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

24. 9.1CVE-2022-35924EPSS 1.5%2022-08-02

    NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in versions before `4.10.3` or `3.29.10` are affected. If an attacker could forge a request …

25. 4.3CVE-2022-35921EPSS 0.5%2022-08-01

    fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. U…

26. 5.3CVE-2022-31190EPSS 0.9%2022-08-01

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" ob…

27. 4.3CVE-2022-31178EPSS 0.5%2022-08-01

    eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are ad…

28. 4.3CVE-2022-31155EPSS 0.5%2022-08-01

    Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible for an attacker to delete other users’ saved searches due to a bug in the authorization check. The vulnerability does not…

29. 4.3CVE-2022-31154EPSS 0.5%2022-08-01

    Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the a…

30. 6.5CVE-2022-35716EPSS 0.7%2022-08-01

    IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper securit…

31. 3.3CVE-2022-22326EPSS 0.2%2022-08-01

    IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.

32. 6.3CVE-2022-1499EPSS 0.8%2022-07-26

    Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

33. 9.6CVE-2022-1309EPSS 0.9%2022-07-25

    Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

34. 9.1CVE-2022-0670EPSS 1.3%2022-07-25

    A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows …

35. 5.3CVE-2022-0594ExploitEPSS 2.2%2022-07-25

    The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, all…

36. 6.1CVE-2022-1132EPSS 0.3%2022-07-23

    Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device.

37. 8.8CVE-2022-31168EPSS 0.8%2022-07-22

    Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. Th…

38. 7.5CVE-2022-34046ExploitEPSS 21%2022-07-20

    An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].

39. 9.8CVE-2022-26479EPSS 2.1%2022-07-17

    An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor) causes all API calls to execute as admin without authentication.

40. 7.2CVE-2022-36126EPSS 2.7%2022-07-16

    An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.

41. 9.8CVE-2022-35890EPSS 2.0%2022-07-15

    An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were generated in the past and then hijack ses…

42. 6.5CVE-2022-31153EPSS 1.5%2022-07-15

    OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue a…

43. 7.5CVE-2022-31107EPSS 2.9%2022-07-15

    Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth Id…

44. 4.3CVE-2022-2408EPSS 0.6%2022-07-14

    The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.

45. 7.4CVE-2022-30203EPSS 1.5%2022-07-12

    Windows Boot Manager Security Feature Bypass Vulnerability

46. 6.5CVE-2022-29619EPSS 0.9%2022-07-12

    Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted.

47. 7.5CVE-2022-31139EPSS 1.2%2022-07-11

    UnsafeAccessor (UA) is a bridge to access jdk.internal.misc.Unsafe & sun.misc.Unsafe. Normally, if UA is loaded as a named module, the internal data of UA is protected by JVM and others can only access UA via UA's standard API. The main ap…

48. 9.8CVE-2022-32294EPSS 2.5%2022-07-11

    Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command). It is visible in cleartext on port UDP 514 (aka the syslog port). NOTE: a third party reports that this c…

49. 4.3CVE-2022-32290EPSS 0.2%2022-07-06

    The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the devic…

50. 9.8CVE-2022-32310EPSS 1.7%2022-07-05

    An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php.