CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- imperva securesphereImperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login...8.8 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 more +4 moreA flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch...6.5 Medium
- [unknown] docker, mobyproject moby, opensuse leap +3 more +5 moreThe default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does...6.3 Medium
- [unknown] podman, libpod project libpod +1 morePodman Elevated Container Privileges5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as...7.0 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...8.0 High
- philips brilliance ct big bore firmware, brilliance ct scanners, brilliance firmware 64 +2 more +4 morePhilips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft...8.8 High
- debian linux, linux kernel, [unknown] kernel: +7 more +9 moreA flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the...5.5 Medium
- apache tomcatTomcat uses trusted privileges when processing web.xml file5.0 Medium