CWE-863: Incorrect Authorization, page 80

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 4.3CVE-2021-39902EPSS 0.8%2021-11-04

   Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incident.

2. 9.8CVE-2021-21693EPSS 1.6%2021-11-04

   When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

3. 8.2CVE-2021-39341ExploitEPSS 22%2021-11-01

   The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file tha…

4. 6.5CVE-2021-24770EPSS 0.9%2021-11-01

   The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbi…

5. 5.3CVE-2021-24757EPSS 1.1%2021-11-01

   The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated users to upload im…

6. 6.5CVE-2021-24742EPSS 0.9%2021-11-01

   The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.

7. 8.8CVE-2021-24717EPSS 1.3%2021-11-01

   The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escala…

8. 7.2CVE-2021-41189EPSS 2.1%2021-10-29

   DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6…

9. 8.8CVE-2021-39321EPSS 2.0%2021-10-21

   Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated user supplied inputs via the import_config function…

10. 6.5CVE-2021-38345EPSS 0.8%2021-10-14

    The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with th…

11. 5.4CVE-2021-20803EPSS 0.7%2021-10-13

    Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen.

12. 5.3CVE-2021-40456EPSS 2.3%2021-10-13

    Windows AD FS Security Feature Bypass Vulnerability

13. 5.3CVE-2021-42137EPSS 0.8%2021-10-11

    An issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the privilege requirement for viewing a list of tickets that shows title, state, etc.

14. 4.3CVE-2021-28661EPSS 0.8%2021-10-07

    Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

15. 4.3CVE-2021-22262EPSS 0.7%2021-10-05

    Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 with Jira Cloud integration enabled allows Jira users without…

16. 9.8CVE-2021-41093EPSS 1.5%2021-10-04

    Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint…

17. 4.9CVE-2021-22535EPSS 0.8%2021-09-28

    Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclo…

18. 6.5CVE-2021-24652EPSS 0.7%2021-09-27

    The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

19. 7.5CVE-2021-40655KEVExploitEPSS 87%2021-09-24

    An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

20. 6.5CVE-2021-40654EPSS 1.9%2021-09-24

    An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

21. 6.5CVE-2021-36749ExploitEPSS 81%2021-09-24

    In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with…

22. 4.3CVE-2021-34648EPSS 0.7%2021-09-22

    The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers…

23. 6.5CVE-2021-34647EPSS 1.2%2021-09-22

    The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticat…

24. 8.8CVE-2020-19551EPSS 1.8%2021-09-21

    Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong.

25. 7.5CVE-2021-41082EPSS 1.8%2021-09-20

    Discourse is a platform for community discussion. In affected versions any private message that includes a group had its title and participating user exposed to users that do not have access to the private messages. However, access control…

26. 6.8CVE-2020-16630EPSS 0.7%2021-09-20

    TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Compari…

27. 5.3CVE-2019-16651EPSS 1.1%2021-09-20

    An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a us…

28. 7.5CVE-2021-40639EPSS 1.2%2021-09-15

    Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.

29. 9.8CVE-2020-21124EPSS 2.2%2021-09-15

    UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.

30. 8.6CVE-2021-39206EPSS 1.5%2021-09-09

    Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilities CVE-2021-32777 and CVE-2021-32779. This may lead to incorrect routing or authorization policy dec…

31. 9.8CVE-2021-28911EPSS 1.7%2021-09-09

    BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g. device serial number). Having those info, a possible loginId can be self-calculated in a brute…

32. 4.3CVE-2021-22239EPSS 0.6%2021-09-09

    An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.

33. 6.5CVE-2021-28567EPSS 0.8%2021-09-08

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify …

34. 7.8CVE-2021-35526EPSS 0.1%2021-09-08

    Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600…

35. 4.3CVE-2021-1854EPSS 0.7%2021-09-08

    A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .

36. 7.5CVE-2020-19765EPSS 0.9%2021-09-07

    An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.

37. 5.3CVE-2021-35949EPSS 0.9%2021-09-07

    The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

38. 6.5CVE-2021-38312EPSS 1.3%2021-09-02

    The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php…

39. 5.3CVE-2021-39119EPSS 0.8%2021-09-01

    Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue no…

40. 6.5CVE-2021-36039EPSS 1.7%2021-09-01

    Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via the `quoteId` parameter. An attacker can abuse this vulnerability to disclose sens…

41. 3.1CVE-2021-39164EPSS 1.5%2021-08-31

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room…

42. 3.1CVE-2021-39163EPSS 0.9%2021-08-31

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulner…

43. 5.3CVE-2021-34434EPSS 1.3%2021-08-30

    In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are …

44. 6.8CVE-2021-28696EPSS 0.4%2021-08-27

    IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which shoul…

45. 5.4CVE-2021-22256EPSS 0.7%2021-08-25

    Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status

46. 4.3CVE-2021-22247EPSS 0.9%2021-08-25

    Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics

47. 4.3CVE-2021-22243EPSS 0.5%2021-08-25

    Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.

48. 8.8CVE-2021-22236EPSS 0.9%2021-08-25

    Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1.

49. 7.5CVE-2021-39156EPSS 1.2%2021-08-24

    Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a…

50. 7.5CVE-2021-39155EPSS 1.2%2021-08-24

    Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. According to [RFC 4343](https://datatracker.ietf.org/doc/html…