CWE-1220: Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack the required granularity
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 moreSpring Cloud Config has an Authorization Bypass Through User-Controlled Key7.5 High
- openclawOpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access6.0 Medium
- katacontainers kata containers, kata-containers, katacontainers confidential containers +3 more +5 moreKata Containers: CopyFile Policy Subversion via Symlinks8.2 High
- apache airflowApache Airflow: Dags endpoint might provide access to otherwise inaccessible entities4.3 Medium
- apache airflowApache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users4.3 Medium
- augmenttCVE-2026-63569.6 Critical
@paperclipai/servernpmPaperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys9.9 Critical- red hat openshift gitopsArgocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation9.1 Critical
- microsoft defender, defender antimalware platform +1 moreMicrosoft Defender Elevation of Privilege Vulnerability7.8 High
- ping identity pingidmInsufficient granularity of access control for Remote Connector Servers in client mode6.9 Medium
- vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +13 more +15 moreVite Affected by Arbitrary File Read via Vite Dev Server WebSocket8.2 High
- jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 moreFastMCP OAuth Proxy token reuse across MCP servers7.4 High
- cisco application policy infrastructure controller (apic)Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability5.5 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreInsufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to...4.0 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreInsufficient Granularity of Access Control in SEV firmware could allow a privileged user with a...4.6 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +3 more +5 moreMissing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist...7.0 High
- ercom cryptoboxPrivilege Elevation in Ercom Cryptobox administration console4.8 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreInsufficient Access Control in lunary-ai/lunary7.5 High
- gitlabInsufficient Granularity of Access Control in GitLab5.4 Medium
- asseco infomedica plusImproper Access Control in Asseco Infomedica Plus5.1 Medium
- cisco identity services engine software, identity services engine +1 moreA vulnerability in the web-based management interface of Cisco ISE could allow an authenticated,...4.3 Medium
- opentext flipperInsufficient Access Control vulnerability has been discovered in OpenText Flipper.2.3 Low
- opentext flipperInsufficient access control vulnerability has been discovered in Opentext Flipper.1.0 Low
- neojapan inc. chatluckChatLuck contains an insufficient granularity of access control vulnerability in Invitation of...6.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipa9.1 Critical
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper input validation in the system management mode (SMM) could allow a privileged attacker...7.5 High
- hcl software connectionsHCL Connections is vulnerable to broken access control3.7 Low
- gitlabInsufficient Granularity of Access Control in GitLab3.1 Low
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreInsufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable...7.3 High- gitlabInsufficient Granularity of Access Control in GitLab4.3 Medium
- servicenow now platformData Inference in Now Platform via Conditional ACLs8.2 High
- infinera g42, nokia g42 firmware +1 moreImproper Access Control Granularity impacting Infinera G424.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreFreeipa: idm: privilege escalation from host to domain admin in freeipa9.1 Critical
- gitlabInsufficient Granularity of Access Control in GitLab3.7 Low
- gitlabInsufficient Granularity of Access Control in GitLab2.7 Low
- gitlabInsufficient Granularity of Access Control in GitLab4.9 Medium
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10 +6 more +8 moreVisual Studio Information Disclosure Vulnerability5.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLab5.3 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 18.4.1,...9.8 Critical
- gitlabInsufficient Granularity of Access Control in GitLab5.3 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +187 more +189 moreInsufficient Granularity of Access Control in Core7.5 High
- dell data domain operating system, powerprotect data domain, dd os 7.10 +4 more +6 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0...8.8 High
- gitlabInsufficient Granularity of Access Control in GitLab5.2 Medium
- cisco nx-os softwareCisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability7.4 High
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control4.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +29 more +31 moreImproper input validation in AMD Crash Defender could allow an attacker to provide the Windows®...5.5 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...7.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...7.5 High
intel-microcodeDebian,microcode_ctlAlmaLinux +1 moreInsufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow...6.8 Medium- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper...7.8 High
- Show moreLoading…