CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- huawei harmonyosPermission control vulnerability in the Wi-Fi module. Successful exploitation of this...5.5 Medium
- huawei harmonyosPermission control vulnerability in the camera module. Successful exploitation of this...2.8 Low
- huawei harmonyosPermission control vulnerability in the Gallery module. Successful exploitation of this...6.2 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in the home screen module Impact: Successful exploitation...6.8 Medium
- huawei harmonyosVulnerability that allows setting screen rotation direction without permission verification in...6.2 Medium
- huawei emui, harmonyos +1 moreVulnerability that allows third-party call apps to send broadcasts without verification in the...5.9 Medium
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the calendar storage module Impact: Successful exploitation of...4.8 Medium
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the calendar storage module Impact: Successful exploitation of...3.9 Low
- No product listedRedash getattr python.py run_query sandbox2.1 Low
- huawei harmonyosPermission bypass vulnerability in the media library module Impact: Successful exploitation of...7.8 High
- aimhubio aimaimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation5.3 Medium
- huawei harmonyosPermission control vulnerability in the media library module Impact: Successful exploitation of...6.2 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Access Control List Bypass Vulnerability5.8 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +81 more +83 morePermissions, Privileges, and Access Controls in Video Analytics and Processing7.9 High
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...7.5 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the Connectivity module Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 moreVulnerability of improper authentication in the ANS system service module Impact: Successful...6.5 Medium
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +28 more +30 morePermissions, Privileges, and Access Controls issue in Automotive OS Platform7.5 High
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...6.2 Medium
- huawei harmonyosVulnerability of improper access control in the album module Impact: Successful exploitation of...6.1 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 morePermissions, Privileges, and Access Controls in Data6.7 Medium
- cisco nexus 3550 system software, nexus 3550 firmware +1 moreCisco Nexus 3550-F Switches Access Control List Programming Vulnerability5.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the Gallery app Impact: Successful exploitation of this...5.1 Medium
- huawei harmonyosPermission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this...4.0 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +2 moreA vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive...6.0 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the ringtone setting module Impact: Successful...5.1 Medium
- huawei emui, harmonyos +1 moreVulnerability of permission verification for APIs in the DownloadProviderMain module Impact:...5.1 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in the lock screen module Impact: Successful exploitation...4.0 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the account synchronisation module. Impact: Successful...6.2 Medium
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +222 more +224 morePermissions, Privileges, and Access Control issues in TZ Secure OS7.3 High
- huawei emui, harmonyos +1 moreFunction vulnerabilities in the Calendar module Impact: Successful exploitation of this...5.9 Medium
- ibm db2, db2 on cloud pak for data, db2 warehouse +2 moreIBM Db2 on Cloud Pak for Data privilege escalation7.4 High
- cisco firepower management center, firepower threat defense software, secure firewall management center +2 moreA vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower...5.8 Medium
- huawei emui, harmonyos +1 moreThe WindowManager module has a vulnerability in permission control. Impact: Successful...6.2 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the account module Impact: Successful exploitation of this...6.2 Medium
- dell display and peripheral manager, display manager +1 moreDell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control...7.3 High
- dell pairDell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A...6.6 Medium
- huawei emui, harmonyos +1 moreThe DownloadProviderMain module has a vulnerability in API permission verification. Successful...4.4 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR...5.8 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the XLayout component. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of API privilege escalation in the wifienhance module. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of system file information leakage in the USB Service module. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of permission control in the window management module. Successful exploitation of...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of incomplete permission verification in the input method module. Successful...7.5 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the audio module. Successful exploitation of this...7.5 High
- best fee management system project fee management system, sourcecodester best fee management system +1 moreSourceCodester Best Fee Management System Add User admin_class.php save_user access control6.3 Medium
- huawei emui, harmonyos +1 moreInappropriate authorization vulnerability in the system apps. Successful exploitation of this...7.5 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca6574au firmware +13 more +15 morePermissions, Privileges, and Access Controls in Display6.6 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7...7.2 High
- shopbeat shop beat media player, rockwellautomation studio +1 moreShop Beat Services Vulnerable To Insecure Permissions9.8 Critical
- Show moreLoading…