CWE-863: Incorrect Authorization, page 85

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 9.8CVE-2016-20001EPSS 1.2%2021-01-01

   The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

2. 6.5CVE-2020-26029EPSS 0.8%2020-12-28

   An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of head…

3. 4.9CVE-2020-26028EPSS 0.9%2020-12-28

   An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets.

4. 8.8CVE-2020-24674EPSS 3.1%2020-12-22

   In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more priv…

5. 5.4CVE-2020-4794EPSS 0.8%2020-12-21

   IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of se…

6. 3.3CVE-2020-0481EPSS 0.1%2020-12-15

   In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges n…

7. 7.8CVE-2020-0479EPSS 0.4%2020-12-15

   In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with n…

8. 4.6CVE-2020-0473EPSS 0.2%2020-12-15

   In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer fil…

9. 3.5CVE-2020-8919EPSS 0.3%2020-12-10

   An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other …

10. 4.3CVE-2020-29454EPSS 0.9%2020-12-02

    Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.

11. 6.3CVE-2020-26250EPSS 1.1%2020-12-01

    OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version 0.12.0 and before 0.12.2, the deprecated (in jupyterhub 1.2) configuration `Authenticator.whitelist`, which should be transparently mapped to `Authen…

12. 3.6CVE-2020-29374EPSS 0.4%2020-11-28

    An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operation…

13. 4.2CVE-2020-15248EPSS 0.3%2020-11-23

    October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.470, backend users with the default "Publisher" system role have access to create & man…

14. 7.5CVE-2020-15246EPSS 1.7%2020-11-23

    October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.421 and before version 1.0.469, an attacker can read local files on an October CMS server via a specially crafted …

15. 6.5CVE-2020-28053EPSS 1.5%2020-11-23

    HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.

16. 7.8CVE-2020-28211EPSS 0.3%2020-11-19

    A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.

17. 5.3CVE-2020-25701EPSS 1.4%2020-11-19

    If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the…

18. 7.5CVE-2020-25699EPSS 1.6%2020-11-19

    In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and ear…

19. 5.3CVE-2020-8278EPSS 1.0%2020-11-19

    Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.

20. 6.5CVE-2020-26223EPSS 1.1%2020-11-13

    Spree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. The perpetrator could query the API v2 O…

21. 5.5CVE-2020-11209EPSS 1.6%2020-11-12

    Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439

22. 6.6CVE-2020-17049EPSS 14%2020-11-11

    A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised servic…

23. 6.5CVE-2020-25655EPSS 0.6%2020-11-09

    An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permissi…

24. 6.5CVE-2020-24401EPSS 2.3%2020-11-09

    Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's ac…

25. 7.8CVE-2020-3600EPSS 0.3%2020-11-06

    A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient security controls on the CLI. An attacker coul…

26. 6.5CVE-2020-3592EPSS 0.8%2020-11-06

    A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system. The vulnerability is due to in…

27. 4.3CVE-2020-26506EPSS 0.8%2020-11-05

    An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privil…

28. 7.5CVE-2020-15278EPSS 1.1%2020-10-28

    Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a…

29. 5.3CVE-2020-3852EPSS 1.0%2020-10-27

    A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website.

30. 6.5CVE-2020-3578EPSS 1.2%2020-10-21

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access rule and acce…

31. 5.3CVE-2020-27609EPSS 0.8%2020-10-21

    BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. This may result in data storage beyond what is authorized for a specific meeting topic or participant.

32. 6.5CVE-2020-6362EPSS 1.0%2020-10-20

    SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected reports are protected with otherauthorization objects, exploitation of the vulnerability could lead to privilege escalati…

33. 5.3CVE-2020-16904EPSS 3.4%2020-10-16

    <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.…

34. 7.2CVE-2020-12503EPSS 23%2020-10-15

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G…

35. 9.8CVE-2020-27156EPSS 2.2%2020-10-15

    Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for remote code execution by an unauthenticated user.

36. 9.8CVE-2020-13957EPSS 79%2020-10-13

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authenticati…

37. 6.5CVE-2020-15251EPSS 1.5%2020-10-13

    In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions …

38. 7.7CVE-2020-3467EPSS 0.9%2020-10-08

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. The vulnerability is due to improper en…

39. 4.3CVE-2020-13335EPSS 0.8%2020-10-07

    Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group.

40. 7.5CVE-2020-13334EPSS 1.5%2020-10-07

    In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query

41. 8.8CVE-2019-19200EPSS 1.7%2020-10-06

    REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.

42. 6.5CVE-2020-15664EPSS 1.4%2020-10-01

    By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confu…

43. 7.2CVE-2020-13322EPSS 1.1%2020-09-30

    A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.

44. 7.5CVE-2020-26121EPSS 1.3%2020-09-27

    An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should not be able to create it. This occurs b…

45. 7.5CVE-2020-25869EPSS 1.4%2020-09-27

    An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.

46. 5.5CVE-2020-3477EPSS 0.3%2020-09-24

    A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions…

47. 8.1CVE-2020-3474EPSS 0.9%2020-09-24

    Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management softwa…

48. 7.8CVE-2020-3404EPSS 0.3%2020-09-24

    A vulnerability in the persistent Telnet/Secure Shell (SSH) CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying operating system (OS) w…

49. 8.8CVE-2020-4621EPSS 1.3%2020-09-22

    IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.

50. 4.3CVE-2020-2258EPSS 0.7%2020-09-16

    Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint.