CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- bosch pra-es8p2s, pra-es8p2s firmware +1 moreWeb server runs as root4.8 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreExecution with Unnecessary Privileges in polonel/trudesk8.8 High
- acronis snap deployLocal privilege escalation due to excessive permissions assigned to child processes7.8 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Local privilege Escalation7.8 High
- amazon web services hotdogHotdog Container Escape8.8 High
- amazon web services log4j-cve-2021-44228-hotpatch, amazon log4jhotpatch +1 moreLog4j hot patch package privilege escalation8.8 High
- amazon web services hotdogHotdog Container Escape8.8 High
- amazon web services log4j-cve-2021-44228-hotpatch, amazon log4jhotpatch +1 moreLog4j hot patch package privilege escalation8.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability5.1 Medium
- vmware identity manager, vrealize automation, workspace one access +3 more +5 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...7.8 High
- sick overall equipment effectivenessAn attacker can perform a privilege escalation through the SICK OEE if the application is...7.8 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation due to excessive permissions assigned to child processes7.8 High
- dell powermax os, solutions enabler vapp, solutions enabler +5 more +7 moreThe Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local...7.8 High
- ipython, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in ipython8.2 High
- avast free antivirus, watchguard panda antivirus +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where...7.8 High
- bitdefender endpoint security tools, total security +1 morePrivilege escalation via SeImpersonatePrivilege7.8 High
- eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 moreIn Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for...9.8 Critical
- siemens ruggedcom rox mx5000, ruggedcom rox rx1400, ruggedcom rox rx1500 +17 more +19 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM...8.8 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability8.1 High
- avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 moreAvaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability8.0 High
- avaya aura utility servicesAvaya Aura Utility Services Privilege Escalation Vulnerability8.0 High
- avaya aura utility servicesAvaya Aura Utility Services Privilege Escalation Vulnerability7.7 High
- cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +9 more +11 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- keycloak, redhat single sign-on +1 moreAuthentication Bypass in keycloak4.2 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries5.5 Medium
- ge mu320e firmwareA miscommunication in the file system allows adversaries with access to the MU320E to escalate...7.8 High
- ge reason dr60 firmwareThe software performs an operation at a privilege level higher than the minimum level required,...7.8 High
- weaveWeave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries7.8 High
- siemens license management utility, siemens ag license management utility (lmu) +1 moreA vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4)....7.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft software6.7 Medium
- sintef urxRVD#1495: Universal Robots URCaps execute with unbounded privileges6.8 Medium
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA8.8 High
- kata containers containers, katacontainers runtime +1 moreKata Containers - Containers have access to the guest root filesystem device3.8 Low
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 High
- mcafee data exchange layer, mcafee, llc data exchange layer (dxl) broker +1 moreUnquoted service executable path4.2 Medium
- pyinstallerLocal Privilege Escalation present only on the Windows version of PyInstaller7.0 High
- inist ezmasterIn EzMaster before 5.2.11 docker containers were executed with advanced privileges by default6.6 Medium
- microsoft codeql, github vscode-codeql +1 moreIf an attacker can get a user to open a specially prepared directory tree as a workspace in...7.4 High
- apport project apport, canonical ubuntu linux +1 moreApport reads PID files with elevated privileges2.8 Low
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x...8.8 High
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before...8.8 High
- [unknown] rktrkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`...4.7 Medium
- [unknown] rktrkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`...7.0 High
- [unknown] rktrkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`...7.0 High
- freeradius, fedoraproject fedora, redhat enterprise linux +2 moreIt was discovered freeradius up to and including version 3.0.19 does not correctly configure...6.4 Medium
- systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 moreIt was discovered systemd does not correctly check the content of PIDFile files before using it...4.4 Medium
- Show moreLoading…