cve.bz

CWE-863: Incorrect Authorization, page 78

Filter

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

Ask an AI about CWE-863

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-863: Incorrect Authorization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/863.html and https://cve.bz/cve/cwe/863?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2022-24609EPSS 1.6%

    Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.

  2. 7.5CVE-2022-24748EPSS 0.8%

    Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions prior to 6.4.8.2 it is possible to modify customers and to create orders without App Permission. This issue is a result …

  3. 9.1CVE-2022-0482ExploitEPSS 44%

    Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.

  4. 5.3CVE-2022-24714EPSS 1.2%

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled are affected. If you use service custom variables in role restrictions, and you regularly …

  5. 4.3CVE-2021-41241EPSS 0.9%

    Nextcloud server is a self hosted system designed to provide cloud style services. The groupfolders application for Nextcloud allows sharing a folder with a group of people. In addition, it allows setting "advanced permissions" on subfolde…

  6. 4.3CVE-2021-24824EPSS 0.8%

    The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata. This could lead to sensitive data disclosure, …

  7. 6.5CVE-2021-3658EPSS 0.8%

    bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could…

  8. 9.8CVE-2022-24306EPSS 2.4%

    Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.

  9. 8.1CVE-2022-0829EPSS 1.3%

    Improper Authorization in GitHub repository webmin/webmin prior to 1.990.

  10. 8.8CVE-2022-0824ExploitEPSS 97%

    Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

  11. 6.5CVE-2022-0577EPSS 1.2%

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.

  12. 4.3CVE-2022-0762EPSS 0.7%

    Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.

  13. 9.8CVE-2022-21706EPSS 1.2%

    Zulip is an open-source team collaboration tool with topic-based threading. Zulip Server version 2.0.0 and above are vulnerable to insufficient access control with multi-use invitations. A Zulip Server deployment which hosts multiple organ…

  14. 7.8CVE-2019-25058EPSS 0.4%

    An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

  15. 5.4CVE-2022-0727EPSS 0.7%

    Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.

  16. 7.5CVE-2022-25335EPSS 1.3%

    RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulation, as exploited in the wild in February 2022. NOTE: although 2022-02-17 is the vendor's vulnerability announcement da…

  17. 9.8CVE-2022-21141EPSS 3.2%

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain a…

  18. 8.8CVE-2020-25722EPSS 1.6%

    Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

  19. 6.5CVE-2022-0451EPSS 1.0%

    Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirectio…

  20. 4.3CVE-2022-25318EPSS 0.6%

    An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups.

  21. 6.5CVE-2022-0633EPSS 2.1%

    The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as…

  22. 6.5CVE-2022-25270EPSS 0.8%

    The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected…

  23. 7.8CVE-2021-3560KEVExploitEPSS 24%

    It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, creat…

  24. 7.8CVE-2021-22042EPSS 0.3%

    VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high…

  25. 8.8CVE-2022-0580EPSS 1.2%

    Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.

  26. 6.5CVE-2022-0309EPSS 0.6%

    Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

  27. 6.5CVE-2022-0117EPSS 1.5%

    Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

  28. 5.5CVE-2022-23998EPSS 0.6%

    Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture in screenlock status.

  29. 6.5CVE-2020-13676EPSS 0.8%

    The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installe…

  30. 4.3CVE-2021-39943EPSS 0.9%

    An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allowed a use…

  31. 5.4CVE-2022-23615EPSS 0.7%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can save a document with the right of the current user which allow accessing API requi…

  32. 6.8CVE-2022-23627EPSS 1.0%

    ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code, introduced in version V5.2.2.2, the program didn't adequately verify effective access of t…

  33. 4.3CVE-2022-21713EPSS 1.2%

    Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticated attacker to view …

  34. 6.5CVE-2021-24947ExploitEPSS 3.1%

    The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, …

  35. 6.5CVE-2021-29394EPSS 0.8%

    Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accounts via lack of proper authorization in…

  36. 9.8CVE-2022-24307EPSS 1.5%

    Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)

  37. 6.5CVE-2021-41571EPSS 1.7%

    In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a …

  38. 6.5CVE-2021-25097EPSS 0.4%

    The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication

  39. 6.5CVE-2022-0273EPSS 0.7%

    Improper Access Control in Pypi calibreweb prior to 0.6.16.

  40. 7.2CVE-2021-46561EPSS 0.8%

    controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achie…

  41. 7.2CVE-2022-23009EPSS 1.1%

    On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device can access other BIG-IP devices managed by the same BIG-IQ system. Note: Software versions which have reached En…

  42. 4.3CVE-2022-0334EPSS 0.7%

    A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the …

  43. 3.8CVE-2022-0333EPSS 0.6%

    A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been rest…

  44. 8.8CVE-2021-4133EPSS 1.4%

    A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.

  45. 4.3CVE-2021-24733EPSS 0.8%

    The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally.

  46. 8.1CVE-2022-21707EPSS 0.8%

    wasmCloud Host Runtime is a server process that securely hosts and provides dispatch for web assembly (WASM) actors and capability providers. In versions prior to 0.52.2 actors can bypass capability authorization. Actors are normally requi…

  47. 9.8CVE-2020-4877EPSS 0.9%

    IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.

  48. 8.8CVE-2022-21701EPSS 0.8%

    Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have `CREATE` permission for `gateways.gateway.networking.k8s.io` objects…

  49. 9.8CVE-2022-22167EPSS 0.7%

    A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn…

  50. 9.3CVE-2022-22157EPSS 0.7%

    A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn…