CWE-863: Incorrect Authorization, page 86

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 7.5CVE-2020-15590EPSS 2.5%2020-09-14

   A vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, …

2. 4.3CVE-2020-13313EPSS 1.0%2020-09-14

   A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgroup badges due to the lack of authorization control.

3. 10.0CVE-2020-13300EPSS 1.3%2020-09-14

   GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

4. 6.5CVE-2020-13284EPSS 1.1%2020-09-14

   A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API Authorization Using Outdated CI Job Token

5. 4.1CVE-2020-25284EPSS 0.3%2020-09-13

   The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d…

6. 8.2CVE-2020-15163EPSS 0.7%2020-09-09

   Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve mu…

7. 6.5CVE-2020-6311EPSS 1.0%2020-09-09

   Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version � 100, does not correctly perform necessary authorization checks for an authenticated user due to Improper Authorizatio…

8. 8.4CVE-2020-3530EPSS 0.3%2020-09-04

   A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must …

9. 7.8CVE-2020-3473EPSS 0.4%2020-09-04

   A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is …

10. 7.5CVE-2020-24941EPSS 1.1%2020-09-04

    An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.

11. 4.3CVE-2020-5418EPSS 0.6%2020-09-03

    Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).

12. 4.3CVE-2020-25025EPSS 0.8%2020-09-02

    The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).

13. 9.8CVE-2020-25055EPSS 0.4%2020-08-31

    An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged SecureFolder process) to bypass admin restrictions in KnoxContainer. The Samsung…

14. 7.8CVE-2020-24716EPSS 0.5%2020-08-27

    OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.

15. 6.3CVE-2020-3522EPSS 0.8%2020-08-26

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to bypass authorization on an affected device and access sensitive information that is…

16. 5.7CVE-2020-19005EPSS 0.7%2020-08-25

    zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.

17. 2.1CVE-2020-16241EPSS 0.3%2020-08-21

    Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

18. 5.5CVE-2020-9712EPSS 3.4%2020-08-19

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.

19. 5.0CVE-2020-3472EPSS 1.1%2020-08-17

    A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a legitimate user account to access sensitive information. The vulnerability is due to improper access restrictions on users…

20. 4.3CVE-2020-3413EPSS 0.7%2020-08-17

    A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to delete a scheduled meeting template that belongs to another user in their organization. The vulnerability is…

21. 4.3CVE-2020-3412EPSS 0.7%2020-08-17

    A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another user in their organization. The vulnerabili…

22. 9.8CVE-2020-8212EPSS 1.6%2020-08-17

    Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.

23. 7.8CVE-2020-7583EPSS 0.3%2020-08-14

    A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, whic…

24. 6.3CVE-2020-7300EPSS 0.6%2020-08-12

    Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HT…

25. 6.5CVE-2020-2233EPSS 0.8%2020-08-12

    A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

26. 7.8CVE-2020-17448EPSS 2.3%2020-08-11

    Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.

27. 7.5CVE-2020-12780EPSS 1.2%2020-08-10

    A security misconfiguration exists in Combodo iTop, which can expose sensitive information.

28. 8.8CVE-2020-3386EPSS 2.0%2020-07-31

    A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is…

29. 9.9CVE-2020-3374EPSS 1.9%2020-07-31

    A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, o…

30. 8.8CVE-2020-14486EPSS 1.3%2020-07-29

    An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.

31. 4.9CVE-2020-15120EPSS 1.0%2020-07-27

    In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of a…

32. 6.5CVE-2020-15126EPSS 1.1%2020-07-22

    In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object.

33. 8.1CVE-2020-15110EPSS 1.1%2020-07-17

    In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.

34. 5.9CVE-2020-3150EPSS 1.5%2020-07-16

    A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote attacker to download sensitive information from the device, which could include the devic…

35. 9.8CVE-2020-3140EPSS 3.1%2020-07-16

    A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient valid…

36. 8.8CVE-2020-2228EPSS 1.4%2020-07-15

    Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalation vulnerability.

37. 9.1CVE-2020-7692EPSS 1.5%2020-07-09

    PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initia…

38. 5.3CVE-2020-15513EPSS 0.8%2020-07-07

    The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.

39. 7.5CVE-2020-5372EPSS 0.9%2020-07-06

    Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which a…

40. 5.3CVE-2020-14196EPSS 1.7%2020-07-01

    In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.

41. 9.1CVE-2020-15084EPSS 1.2%2020-06-30

    In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may l…

42. 9.8CVE-2020-12053EPSS 0.7%2020-06-22

    In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.

43. 8.8CVE-2020-13263EPSS 1.0%2020-06-19

    An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

44. 6.5CVE-2020-13277EPSS 1.8%2020-06-19

    An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5

45. 5.3CVE-2020-3364EPSS 0.9%2020-06-18

    A vulnerability in the access control list (ACL) functionality of the standby route processor management interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the standby…

46. 5.3CVE-2020-3360EPSS 1.3%2020-06-18

    A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access contr…

47. 3.8CVE-2020-6752EPSS 0.6%2020-06-17

    In OMERO before 5.6.1, group owners can access members' data in other groups.

48. 6.5CVE-2020-14214EPSS 0.7%2020-06-16

    Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all tickets of an arbitrary Organization.

49. 6.5CVE-2020-7499EPSS 0.8%2020-06-16

    A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized change…

50. 7.8CVE-2020-0115EPSS 0.2%2020-06-10

    In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution pri…