CWE-863: Incorrect Authorization, page 88

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 8.1CVE-2014-7914EPSS 0.5%2020-02-21

   btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapp…

2. 8.8CVE-2020-5242EPSS 2.0%2020-02-20

   openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB. Starting with version 2…

3. 4.3CVE-2013-4228EPSS 1.2%2020-02-18

   The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to private groups, which allows remote authenticated users to guess node IDs, subscri…

4. 5.5CVE-2020-7251EPSS 0.2%2020-02-14

   Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from o…

5. 8.8CVE-2020-5239EPSS 0.9%2020-02-13

   In Mailu before version 1.7, an authenticated user can exploit a vulnerability in Mailu fetchmail script and gain full access to a Mailu instance. Mailu servers that have open registration or untrusted users are most impacted. The master a…

6. 8.8CVE-2020-6380EPSS 1.2%2020-02-11

   Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.

7. 7.5CVE-2020-5318EPSS 1.1%2020-02-06

   Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving com…

8. 4.3CVE-2020-8119EPSS 0.9%2020-02-04

   Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.

9. 6.8CVE-2013-2673EPSS 0.5%2020-02-03

   Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access.

10. 5.3CVE-2020-7955EPSS 1.4%2020-01-31

    HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.

11. 9.8CVE-2013-2198EPSS 1.7%2020-01-30

    The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.

12. 9.1CVE-2013-1350EPSS 1.5%2020-01-30

    Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities

13. 7.5CVE-2013-2574ExploitEPSS 30%2020-01-29

    An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information.

14. 4.3CVE-2020-2104EPSS 1.1%2020-01-29

    Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.

15. 9.8CVE-2020-8086EPSS 1.6%2020-01-28

    The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. This grants remote entities admin-only functionality if their username matches th…

16. 8.1CVE-2013-4862ExploitEPSS 3.7%2020-01-28

    MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/…

17. 6.5CVE-2019-5474EPSS 1.1%2020-01-28

    An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.

18. 7.8CVE-2019-17190EPSS 0.5%2020-01-27

    A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORITY\SYSTEM) when AvastSecureBrowser.exe ch…

19. 8.8CVE-2020-2097EPSS 1.2%2020-01-15

    Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

20. 4.3CVE-2020-6307EPSS 0.7%2020-01-14

    Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

21. 4.3CVE-2012-3821EPSS 1.2%2020-01-10

    A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field.

22. 7.5CVE-2012-3822EPSS 1.9%2020-01-10

    Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

23. 7.4CVE-2019-17014EPSS 1.2%2020-01-08

    If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox < 71.

24. 7.1CVE-2016-6591EPSS 0.3%2020-01-08

    A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security restrictions.

25. 8.8CVE-2019-14843EPSS 1.2%2020-01-07

    A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly cond…

26. 7.3CVE-2019-6855EPSS 1.0%2020-01-06

    Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which c…

27. 6.5CVE-2014-0169EPSS 0.8%2020-01-02

    In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another appli…

28. 8.8CVE-2010-3782EPSS 1.1%2020-01-02

    obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

29. 7.5CVE-2019-20213EPSS 2.2%2020-01-02

    D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

30. 4.3CVE-2019-12837EPSS 1.1%2019-12-31

    The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.

31. 4.3CVE-2018-20498EPSS 0.7%2019-12-30

    An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.

32. 7.5CVE-2018-20494EPSS 1.6%2019-12-30

    An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.

33. 4.3CVE-2018-20493EPSS 0.7%2019-12-30

    An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.

34. 6.5CVE-2019-4343EPSS 1.5%2019-12-30

    IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private information. An attacker could exploit this vulnerability to access content that should be restrict…

35. 7.5CVE-2013-4985ExploitEPSS 9.0%2019-12-27

    Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream

36. 5.3CVE-2018-20492EPSS 0.9%2019-12-26

    An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control (issue 2 of 6).

37. 8.8CVE-2019-19681EPSS 4.6%2019-12-26

    Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vul…

38. 6.3CVE-2019-19984EPSS 1.0%2019-12-26

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns.

39. 4.6CVE-2017-16778EPSS 0.6%2019-12-24

    An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level…

40. 9.8CVE-2012-6094EPSS 2.1%2019-12-20

    cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system

41. 4.3CVE-2019-11294EPSS 0.8%2019-12-19

    Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

42. 5.7CVE-2019-8512EPSS 0.7%2019-12-18

    This issue was addressed with improved transparency. This issue is fixed in iOS 12.2. A user may authorize an enterprise administrator to remotely wipe their device without appropriate disclosure.

43. 8.8CVE-2019-0384EPSS 0.9%2019-12-17

    Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for…

44. 8.8CVE-2019-0383EPSS 1.1%2019-12-17

    Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for…

45. 9.8CVE-2019-7192KEVExploitEPSS 88%2019-12-05

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.

46. 8.8CVE-2019-19597EPSS 21%2019-12-05

    D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.

47. 7.8CVE-2019-19520EPSS 1.3%2019-12-05

    xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen.

48. 4.3CVE-2013-4411EPSS 1.4%2019-12-03

    Review Board: URL processing gives unauthorized users access to review lists

49. 7.5CVE-2013-4410EPSS 2.4%2019-12-02

    ReviewBoard: has an access-control problem in REST API

50. 6.5CVE-2016-6353EPSS 0.8%2019-11-26

    Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.