CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- ehoney project ehoneyseccome Ehoney signup access control6.3 Medium
- oretnom23 simple cold storage management systemSourceCodester Simple Cold Storage Management System Avatar unrestricted upload4.7 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System Admin Panel employeeadd.php access control6.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System Image File employeeview.php unrestricted upload6.3 Medium
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload6.3 Medium
- hitachi storage plug-in for vmware vcenter, storage plug-in +1 morePrivilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter5.4 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability7.9 High
- automationbroker apbA flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This...7.8 High
- hestiacp hestiacp/hestiacp, control panel +1 moreIncorrect Privilege Assignment in hestiacp/hestiacp9.1 Critical
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-2667.6 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability6.5 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability8.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability6.5 Medium
- phpipam, phpipam phpipam/phpipam +1 moreIncorrect Privilege Assignment in phpipam/phpipam6.5 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability6.7 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine File Download Vulnerability4.3 Medium
- otrsAgents are able to lock the ticket without the "Owner" permission3.5 Low
- hashicorp vaultIncorrect Privilege Assignment in HashiCorp Vault8.1 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerability7.5 High
- oracle openjdkAn insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11...7.8 High
- cisco confd, network services orchestrator +1 moreConfD CLI Secure Shell Server Privilege Escalation Vulnerability7.8 High
- nmstate kubernetes-nmstate, redhat openshift virtualization +1 moreWithdrawn Advisory: kubernetes-nmstate Insecure Privilege Management7.0 High
- redhat openshiftAn insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local a…7.0 High
- redhat single sign-onAn insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An...7.8 High
- cifs-utils, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file...6.1 Medium
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...7.8 High
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...7.0 High
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...7.0 High
- redhat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible...7.8 High
- redhat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities6.5 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Privilege Escalation Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerability4.4 Medium
- samba, redhat enterprise linux, storage +2 moreA flaw was found in the way samba handled file and directory permissions. An authenticated user...4.3 Medium
- dell emc networker, networker +1 moreDell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment...6.8 Medium
- mcafee application and change control, mcafee,llc mcafee application and change control (macc) +1 moreImproper privilege assignment vulnerability in the installer component of MACC7.7 High
- linux kernel, canonical ubuntu linux +1 moreUnprivileged overlay + shiftfs read access5.1 Medium
- elastic enterprise searchElastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search...8.8 High
- elastic elasticsearchPrivilege Escalation Flaw in Elasticsearch8.8 High
- eaton intelligent power manager (ipm), intelligent power manager +1 moreIncorrect privilege assignment allowing non-admin users to upload config files7.8 High
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: Incorrect privilege assignment allows local privilege escalation7.0 High
- openshift enterprise openshift/apb-base, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- openshift enterprise openshift/mariadb-apb, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- elastic elasticsearchImproper Privilege Management in Elasticsearch8.8 High
- [unknown] openshift/mediawiki-apb, redhat openshift +1 moreA vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an...7.0 High
- red hat openshift/template-service-broker-operator, redhat template service broker operator +1 moreA vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions...7.0 High
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp...7.0 High
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- Show moreLoading…