CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreAterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,...4.7 Medium
- nvidia geforce, gpu display driver, vgpu driver, cloud gaming driver, quadro +2 more +4 moreCVE7.8 High
- ignite realtime openfireIgnite Realtime Openfire privilege escalation vulnerability9.8 Critical
- claris filemaker server, pro +1 moreA privilege escalation issue existed in FileMaker Server, potentially exposing sensitive...4.9 Medium
- papercut mf, ng, ng, papercut mf +2 moreIncorrect authorization controls in PaperCut NG/MF APIs8.6 High
- grandstream gxp1400 firmware, gxp1405 firmware, gxp1610 firmware +5 more +7 moreAn issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote...8.8 High
- ailux imx6, imx6 bundle +1 moreA CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser ...6.8 Medium
- node.js, nodejs node, nodejs +2 moresetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 High
- hardy-barth cph2 echarge, cph2 echarge firmware +1 moreHardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with...8.8 High
- notionAn issue in Notion for macOS version 3.1.0 and before, allows remote attackers to execute...3.3 Low
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- openkruise kruiseLeverage the kruise-daemon pod to list all secrets in the entire cluster6.5 Medium
- aveva application server, batch management, communication drivers pack +19 more +21 moreAVEVA Operations Control Logger Execution with Unnecessary Privileges7.8 High
- papercut ng, ng, papercut mf, mf +2 morePrivilege Escalation Vulnerability7.8 High
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX privilege escalation5.9 Medium
- netapp snapcenterPrivilege Escalation Vulnerability in SnapCenter8.3 High
- netapp snapcenter plugin for vmware vsphere, snapcenter plug-in +1 morePrivilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere5.4 Medium
- kubernetes kops, operations +1 morePrivilege Escalation in kOps using GCE/GCP Provider in Gossip Mode8.0 High
- gitlabExecution with Unnecessary Privileges in GitLab8.2 High
- one, oneidentity password manager +1 moreOne Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation7.6 High
- adobe connectRCE in Saphira Connect9.8 Critical
- trellix data loss prevention endpoint for windows, data loss prevention +1 moreA Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which...7.1 High
- schweitzer engineering laboratories sel-5037 sel grid configuratorExecution with Unnecessary Privileges8.8 High
- cisco thousandeyes enterprise agent, thousandeyes recorder application, thousandeyes recorder +2 moreA vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation...5.5 Medium
- dell powerscale onefsDell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low...6.7 Medium
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected...7.8 High
- apache airflowApache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges8.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions5.2 Medium
- cisco broadworks, broadworks application delivery platform firmware, broadworks application server firmware +14 more +16 moreA vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate...6.0 Medium
- zoom rooms, zoom video communications inc rooms for windows +1 moreImproper privilege management in Zoom Rooms before version 5.14.5 may allow an authenticated user...7.3 High
- nvidia dgx a100/a800, dgx a100, dgx a100 firmware +2 more +4 moreNVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution...7.5 High
- debian linux, linux kernel +1 moreA vulnerability was found in the HCI sockets implementation due to a missing capability check in...6.8 Medium
- pterodactyl wingsWings vulnerable to escape to host from installation container9.1 Critical
- illumina iscan control software, iscan firmware, iseq 100 +19 more +21 moreCVE-2023-19667.4 High
- qemu, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be...7.8 High
- cynet client agentAn issue in Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable...4.4 Medium
- wondershare dr.foneWondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst....7.8 High
- dell alienware update, supportassist client consumer, update +3 more +5 moreDell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial ...7.8 High
- man-db project man-dbman-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain...7.8 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.4 High
- ui edgemax edgerouter firmwareA remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows...8.8 High
- 4ra1n super-xray, super xray project xray +1 morePrivilege Escalation Vulnerability by wrong chmod param6.4 Medium
- moxa aig-300 system image, da-662c-16-lx (glb) system image, uc-2100 system image +74 more +76 moreUC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12,...7.8 High
- maharaMahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0...9.8 Critical
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterApp8.8 High
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation8.2 High
- siemens desigo pxm30-1, desigo pxm30.e, desigo pxm40-1 +17 more +19 moreA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo...8.8 High
- digi connectport x2d, connectport x2d firmware +1 moreDigi ConnectPort X2D10.0 Critical
- dominionvoting imagecast x, dominion voting system imagecast x application, imagecast x firmware +2 more2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-2506.8 Medium
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-25010.0 Critical
- Show moreLoading…