CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- red hat openshift-service-mesh/kiali-rhel7-operator, redhat openshift service mesh +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in all versions of...7.0 High
- red hat openshift/mysql-apb, redhat openshift container platform +1 moreIt has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from...7.0 High
- siemens sinema serverA vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1)....9.9 Critical
- redhat openshift container platform, [red hat] openshift-ansible +1 moreA flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster....7.5 High
- kuberneteskubelet-started container uid changes to root after first restart or if image is already pulled to the node4.9 Medium
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreIncorrect Privilege Assignment in Jenkins Script Security Plugin8.8 High
- bosch smart home controller, smart home controller firmware +1 moreIncorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)5.5 Medium
- bosch smart home controller, smart home controller firmware +1 moreIncorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)8.0 High
- freeradius, fedoraproject fedora, redhat enterprise linux +2 moreIt was discovered freeradius up to and including version 3.0.19 does not correctly configure...6.4 Medium
- [freedesktop.org] systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreIt was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID...4.5 Medium
- red hat jboss enterprise application platformIt was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise...7.8 High
- red hat ansible towerA privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a...8.0 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...7.2 High
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...8.1 High
- advantech webaccessAn Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to...7.8 High
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated Users7.5 High
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated Users6.5 Medium
- redhat jboss enterprise application platform, resteasy +1 moreIncorrect Privilege Assignment in RESTEasy7.5 High
- openbsd openssh, oracle communications user data repository +1 moresshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...4.9 Medium
- pocoo jinja2Incorrect Privilege Assignment in Jinja24.4 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Medium