CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- totolink a7100ru firmware, a950rg firmware, t10 firmware +2 moreIn TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in...9.8 Critical
- unity business technology pty ltd the e-commerce erpWordPress The E-Commerce ERP <= 2.1.1.3 - Privilege Escalation Vulnerability9.8 Critical
- riverbed technology steelcentral netprofiler, steelcentral netexpress +1 moreRiverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE10.0 Critical
- teledyne flir fb-series o, flir fh-series id +1 moreTeledyne FLIR FB-Series O/FLIR FH-Series ID Production Tools production.html access control6.9 Medium
- dromara northstarDromara Northstar Path AuthorizationInterceptor.java preHandle access control5.3 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Non Admin User Can Disable the GlobalProtect App6.8 Medium
- palo alto networks autonomous digital experience managerAutonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability6.3 Medium
- radiflow isap smart collectorRead access of deprivileged Radiflow iSAP Smart Collector user6.8 Medium
- sap se sapcarMultiple Privilege Escalation Vulnerabilities in SAPCAR6.9 Medium
- sap se sapcarMultiple Privilege Escalation Vulnerabilities in SAPCAR6.9 Medium
- No product listedAdvanced Installer before 22.6 has an uncontrolled search path element local privilege escalation...7.5 High
- blackvue dashcam 590x, blackvuenorthamerica blackvue dr590x firmware +1 moreBlackVue Dashcam 590X Configuration upload.cgi access control5.3 Medium
- aonetheme service finder bookingWordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability9.8 Critical
- inspirythemes realhomesWordPress RealHomes theme <= 4.4.0 - Privilege Escalation vulnerability9.8 Critical
- infinera g42, nokia g42 firmware +1 moreOperating System Misconfiguration in Infinera G427.0 High
- No product listedImproper mstatus.SUM bit retention (non-zero) in Open-Source RISC-V Processor commit f517abb...9.1 Critical
- intelbras incontrol, incontrol web +1 moreIntelbras InControl HTTP PUT Request operador permission5.3 Medium
- pebas couponxxl custom post typesWordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability8.6 High
- juzaweb cmsjuzaweb CMS Add New Themes Page install improper authorization5.3 Medium
- juzaweb cmsjuzaweb CMS Import Page imports improper authorization5.3 Medium
- linlinjava litemalllinlinjava litemall post improper authorization5.3 Medium
- iterate gmbh cyberduck, mountain duck +1 moreCyberduck and Mountain Duck - Improper Certificate Store Handling8.0 High
- nvidia ais operator, aistore +1 moreNVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s...5.0 Medium
- noyafa lf9 pro, lf9 pro firmware +1 moreNOYAFA/Xiami LF9 Pro RTSP Live Video Stream Endpoint access control5.3 Medium
- mzzyg bd s1SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control5.3 Medium
- 70mai m300, m300 firmware +1 more70mai M300 Web Server access control2.3 Low
- 70mai 1s70mai 1S Configuration Config.cgi improper authorization5.3 Medium
- canonical authdImproper Permission Management in SSH Session Handling8.5 High
- szluyu99 gin-vue-blogszluyu99 gin-vue-blog PATCH Request manager.go improper authorization6.9 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki allows privilege escalation through link refactoring8.5 High
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Privilege Escalation (PE) Vulnerability4.6 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job8.1 High
- ifkooo one-loginWordPress One-Login plugin <= 1.4 - Privilege Escalation Vulnerability8.1 High
- romancode mapsvgWordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability8.8 High
- holest engineering spreadsheet price changer for woocommerce and wp e-commerce – lightWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability9.8 Critical
- huawei harmonyosVulnerability of improper permission assignment in the note sharing module Impact: Successful...8.2 High
- razormist student result management systemSourceCodester Student Result Management System Register Interface new_user access control6.9 Medium
- changeweb unifiedtransformAn issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course...6.5 Medium
- changeweb unifiedtransformAn issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the ...6.5 Medium
- jack0240 魏 bskms 蓝天幼儿园管理系统jack0240 魏 bskms 蓝天幼儿园管理系统 User Creation addUser improper authorization6.9 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog photos improper authorization6.9 Medium
- juzaweb cmsjuzaweb CMS Plugins Page install access control5.3 Medium
- juzaweb cmsjuzaweb CMS Error Logs Page log-viewer access control5.3 Medium
- juzaweb cmsjuzaweb CMS Permalinks Page permalinks access control5.3 Medium
- juzaweb cmsjuzaweb CMS Menu Page menus access control5.3 Medium
- juzaweb cmsjuzaweb CMS Theme Editor Page default access control5.3 Medium
- juzaweb cmsjuzaweb CMS Media Page media access control5.3 Medium
- juzaweb cmsjuzaweb CMS General Setting Page general access control5.3 Medium
- juzaweb cmsjuzaweb CMS Email Logs Page email access control5.3 Medium
- juzaweb cmsjuzaweb CMS Plugin Editor Page editor access control5.3 Medium
- Show moreLoading…