CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause....8.8 High
- infoblox niosA privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through...6.7 Medium
- intel turbo boost max technology 3.0, lenovo thinkstation p410 firmware, thinkstation p510 firmware +2 more +4 moreImproper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version...7.3 High
- intel chipset device softwareImproper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility)...7.8 High
- androidIn the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK)....8.8 High
- strangebee thehiveAn improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1...8.8 High
- libvirt, fedoraproject fedora +1 moreA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin...8.8 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Bash Bypass Guest Shell Vulnerability6.0 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Privilege Escalation Vulnerability4.2 Medium
- cisco nexus 9000 series application centric infrastructure, nx-os software for nexus 9000 series fabric switches aci mode +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability7.8 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability7.8 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode 11.0.1b, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability7.8 High
- canonical ubuntu download manager, ubuntu download manager +1 moreUDM doesn't check for confinement before running post-processing commands6.7 Medium
- ubuntu content hub, canonical ubuntu linux +1 moreContent-hub DBUS API doesn't prevent confined apps from passing paths to files without access3.9 Low
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...5.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...7.8 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users...7.8 High
- hospira symbiq infusion system, pfizer symbiq infusion system firmware +1 moreHospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger ...8.8 High
- microfocus netiq edirectoryNetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to...7.5 High
- intel rapid storage technology enterprise, lenovo thinkstation p520 firmware, thinkstation p520c firmware +2 more +4 moreImproper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe...7.8 High
- intel usb 3.0 creator utility, intel corporation intel(r) usb 3.0 creator utility +1 moreImproper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated...7.8 High
- intel matrix storage manager, intel corporation intel(r) matrix storage manager +1 moreImproper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an...7.8 High
- thinkst canarytokensThinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size...7.5 High
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Static Credential Vulnerability9.8 Critical
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Privilege Escalation Vulnerability7.8 High
- cloudfoundry container runtime, cloud foundry container runtime (cfcr) +1 moreCloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD8.8 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 High
- cisco firepower 4100 series next-generation firewalls, firepower 9300 series next-generation firewalls, mds 9000 series multilayer switches +9 more +11 moreCisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability6.7 Medium
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Bash Shell Privilege Escalation Vulnerability7.8 High
- cisco nexus 1000v switch for vmware vsphere, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +5 more +7 moreCisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability7.4 High
- cisco nx-os, nexus 3000 series switches, nexus 3500 platform switches +4 more +6 moreCisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability7.8 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability7.8 High
- micro focus filrLocal privilege escalation in Filr famtd7.8 High
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Simple Object Access Protocol Vulnerability5.3 Medium
- cisco sd-wan solution, sd-wan, vbond orchestrator +6 more +8 moreCisco SD-WAN Solution Privilege Escalation Vulnerability7.8 High
- cisco sd-wan solution, sd-wan, vbond orchestrator +6 more +8 morePrivilege Escalation Vulnerability in Cisco SD-WAN Solution7.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...9.8 Critical
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...6.6 Medium
- cisco meraki mr, meraki m5, meraki mx +9 more +11 moreCisco Meraki Local Status Page Privilege Escalation Vulnerability6.5 Medium
- [unknown] redis, redhat openstack +1 moreA permissions flaw was found in redis, which sets weak permissions on certain files and...4.0 Medium
- iab open real-time biddingThe Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote...7.5 High
- zmanda amanda, redhat enterprise linux +1 moreAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a...7.8 High
- cisco wireless lan controller (wlc), wireless lan controller, wireless lan controller software +2 moreCisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability7.5 High
- siemens rox ii, rox ii firmware +1 moreA vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker...7.2 High
- siemens rox ii, rox ii firmware +1 moreA vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network...8.8 High
- cisco catalyst 6800 series switches, ios rom monitor +1 moreCisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability6.8 Medium
- cisco network services orchestratorCisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability7.5 High
- cisco firesight system software, secure firewall threat defense +1 moreCisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability8.2 High
- cisco data center network managerCisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability7.2 High
- Show moreLoading…