CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021...4.0 Medium
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...4.4 Medium
- gnu guix, gnu guix guix-daemon +1 moreLocal privilege escalation in GNU Guix via guix-daemon and '--keep-failed'5.5 Medium
- otrs faq, otrs +1 moreFAQ articles are shown to users without permission3.5 Low
- otrs itsmconfigurationmanagement, otrscisincustomerfrontend +1 moreConfig Items are shown to users without permission3.5 Low
- prosoft-technology icx35-hwc-a firmware, icx35-hwc-e firmware +1 moreChanging the password on the module webpage does not require the user to type in the current...7.5 High
- micro focus solutions business managerprivilege escalation7.3 High
- otrs ag otrscisincustomerfrontend, otrs cis in customer frontend +1 moreAgent is able to link customer's Config Items without permission3.5 Low
- cisco anyconnect secure mobility client, mcafee agent epolicy orchestrator extension +1 moreCisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability5.5 Medium
- apache dolphinschedulerApache DolphinScheduler (incubating) Permission vulnerability6.5 Medium
- cisco ios, ios 15.2(6)e4 +1 moreCisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability7.5 High
- cisco unified customer voice portal (cvp), unified customer voice portal +1 moreCisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability6.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Authenticated User Privilege Escalation Vulnerability7.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Authenticated User Privilege Escalation Vulnerability8.4 High
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Privilege Escalation Vulnerability8.8 High
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability6.3 Medium
- gog galaxy, galaxyclientservice +1 moreGOG Galaxy GalaxyClientService Privilege Escalation8.4 High
- canonical core, snapd, ubuntu linux +2 morelocal snapd exploit through cloud-init7.3 High
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE7.3 High
- cisco sd-wan solution, sd-wan firmware, vbond orchestrator +1 more +3 moreCisco SD-WAN Solution Software Privilege Escalation Vulnerability5.3 Medium
- cisco sd-wan, sd-wan vmanage +1 moreCisco SD-WAN Solution Software Static Credentials Vulnerability8.4 High
- cisco ios xe, ios xe software 16.2.2 +1 moreCisco IOS XE Software Web UI Privilege Escalation Vulnerability8.8 High
- cisco ios xe, ios xe software 16.3.1 +1 moreCisco IOx for IOS XE Software Privilege Escalation Vulnerability9.8 Critical
- cisco ios xe, ios xe software 3.8.0s +1 moreCisco IOS XE Software Privilege Escalation Vulnerability6.7 Medium
- cisco ios xe, ios xe software 16.11.1 +1 moreCisco IOS XE Software Privilege Escalation Vulnerability6.7 Medium
- cisco ios xe, ios xe software 3.8.0s +1 moreCisco IOS XE Software Privilege Escalation Vulnerability6.7 Medium
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability6.7 Medium
- b&r automation studioPrivilege escalation via B&R Automation Studio upgrade service7.5 High
- abb 800xa information managementABB System 800xA Inter process communication vulnerability - 800xA Information Management7.8 High
- abb 800xa batch managementABB System 800xA Inter process communication vulnerability - 800xA Batch Management7.8 High
- abb system 800xa base, 800xa base system +1 moreABB System 800xA Inter process communication vulnerability - System 800xA Base6.6 Medium
- abb 800xa rnrpABB System 800xA Inter process communication vulnerability - 800xA RNRP6.6 Medium
- abb 800xa, 800xa for mod300 +1 moreABB System 800xA Inter process communication vulnerability - 800xA for Mod 3007.8 High
- abb 800xa, 800xa for dci +1 moreABB System 800xA Inter process communication vulnerability - 800xA for DCI7.8 High
- abb base software for softcontrol, base software, mms server for ac 800m +3 more +5 moreABB System 800xA Inter process communication vulnerability5.3 Medium
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure6.2 Medium
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues9.1 Critical
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 morePrivilege Escalation vulnerability in ENS3.9 Low
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 morePrivilege Escalation vulnerability through Symbolic links in ENS8.4 High
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreUnsigned executable vulnerability in ENS can be used to bypass intended self-protection rules6.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.5.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.6.0 Medium
- mcafee endpoint security, mcafee, llc endpoint security (ens) for window +1 moreENS configuration can be edited by attacker with local administrator permissions6.5 Medium
- mcafee application and change control, mcafee, llc mcafee application and change control (macc) +1 moreMACC installer DLL side loading7.3 High
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Privilege Escalation Vulnerability7.0 High
- mcafee advanced threat defense, mcafee, llc mcafee advanced threat defense (atd) +1 morePrivilege escalation in Advanced Threat Defense7.7 High
- cisco data center network managerCisco Data Center Network Manager Privilege Escalation Vulnerability8.8 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreAn authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V...4.8 Medium
- bitdefender antivirus, antivirus for mac +1 moreCode Injection into Bitdefender AV for Mac5.3 Medium
- Show moreLoading…