CWE-863: Incorrect Authorization, page 84

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 6.5CVE-2021-21182EPSS 1.9%2021-03-09

   Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

2. 9.8CVE-2021-21484EPSS 1.3%2021-03-09

   LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.

3. 8.8CVE-2021-21481EPSS 0.5%2021-03-09

   The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that…

4. 4.3CVE-2021-22134EPSS 1.1%2021-03-08

   A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently u…

5. 6.5CVE-2021-21362EPSS 1.3%2021-03-08

   MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a te…

6. 7.2CVE-2020-29020EPSS 1.7%2021-03-05

   Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.6…

7. 6.8CVE-2021-27099EPSS 0.7%2021-03-05

   In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary SPIFFE ID within th…

8. 7.1CVE-2021-26964EPSS 1.0%2021-03-05

   A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an authenticated remote a…

9. 5.7CVE-2021-21725EPSS 0.5%2021-03-05

   A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN …

10. 5.3CVE-2021-26027EPSS 1.0%2021-03-04

    An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the category for an article.

11. 5.4CVE-2021-27225EPSS 0.5%2021-03-01

    In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

12. 6.7CVE-2021-26563EPSS 0.5%2021-02-26

    Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.

13. 4.3CVE-2021-20229EPSS 1.5%2021-02-23

    A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidenti…

14. 5.3CVE-2021-22113EPSS 0.9%2021-02-23

    Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Appli…

15. 7.5CVE-2021-27509EPSS 1.0%2021-02-19

    In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.

16. 6.5CVE-2020-12668EPSS 1.8%2021-02-19

    Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.

17. 5.4CVE-2021-21318EPSS 0.7%2021-02-18

    Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the c…

18. 9.9CVE-2021-26753EPSS 1.1%2021-02-12

    NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to the operating system where NeDi is instal…

19. 7.0CVE-2021-20188EPSS 0.3%2021-02-11

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the…

20. 9.8CVE-2021-27177EPSS 20%2021-02-10

    An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.

21. 7.5CVE-2020-8806EPSS 1.0%2021-02-05

    Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid chain could be incorrectly rejected because timestamp requirements on block headers were not properly enforced.

22. 6.5CVE-2020-27873EPSS 0.6%2021-02-04

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist…

23. 5.3CVE-2021-25777EPSS 0.7%2021-02-03

    In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.

24. 4.3CVE-2021-25774EPSS 0.7%2021-02-03

    In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user.

25. 5.9CVE-2019-25017EPSS 1.4%2021-02-02

    An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory vali…

26. 8.8CVE-2021-21286EPSS 0.8%2021-02-01

    AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. …

27. 9.3CVE-2021-21276ExploitEPSS 7.2%2021-02-01

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists re…

28. 4.3CVE-2020-29605EPSS 0.9%2021-01-29

    An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the Summary fields of private Issues via bug_arr[]= in a crafted bug_actiongr…

29. 7.5CVE-2021-3337ExploitEPSS 12%2021-01-28

    The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit.

30. 5.4CVE-2020-1725EPSS 0.7%2021-01-28

    A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

31. 7.8CVE-2021-26026EPSS 0.7%2021-01-26

    PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image.

32. 7.8CVE-2021-26025EPSS 0.7%2021-01-26

    PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image.

33. 8.8CVE-2020-9492EPSS 4.5%2021-01-26

    In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

34. 4.3CVE-2021-1305EPSS 1.3%2021-01-20

    Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensit…

35. 6.5CVE-2021-1270EPSS 0.6%2021-01-20

    Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information ab…

36. 6.3CVE-2021-1269EPSS 0.8%2021-01-20

    Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information ab…

37. 5.3CVE-2020-4873EPSS 1.0%2021-01-19

    IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836.

38. 8.1CVE-2021-21013EPSS 3.2%2021-01-13

    Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information d…

39. 8.8CVE-2021-1144EPSS 1.4%2021-01-13

    A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handl…

40. 4.3CVE-2021-1143EPSS 0.7%2021-01-13

    A vulnerability in Cisco Connected Mobile Experiences (CMX) API authorizations could allow an authenticated, remote attacker to enumerate what users exist on the system. The vulnerability is due to a lack of authorization checks for certai…

41. 5.3CVE-2021-21609EPSS 1.3%2021-01-13

    Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without Overall/Read permission to access some URLs as if they did have Overall/Read perm…

42. 7.3CVE-2021-0319EPSS 0.3%2021-01-11

    In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of priv…

43. 7.8CVE-2021-0317EPSS 0.2%2021-01-11

    In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is neede…

44. 7.8CVE-2018-8724EPSS 0.3%2021-01-11

    K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). The component is: K7TSMngr.exe.

45. 7.8CVE-2018-8044EPSS 0.3%2021-01-11

    K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys.

46. 5.5CVE-2021-1054EPSS 0.3%2021-01-08

    NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not perform or incorrectly performs an authorization check when an a…

47. 8.8CVE-2020-35948ExploitEPSS 25%2021-01-01

    An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote co…

48. 9.8CVE-2016-20005EPSS 1.2%2021-01-01

    The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

49. 9.8CVE-2016-20004EPSS 1.2%2021-01-01

    The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

50. 9.8CVE-2016-20002EPSS 1.2%2021-01-01

    The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.