CWE-267: Privilege Defined With Unsafe Actions
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreUntrusted search path vulnerability in B&R APROL5.4 Medium
- b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 moreUntrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL7.3 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Bash Arbitrary Code Execution Vulnerability6.7 Medium
- asterisk, asterisk certified asterisk +1 moreAsterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan7.4 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)....8.7 High
- google androidIn v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing...7.8 High
- dell command \| monitor, command monitor (dcm) +1 moreDell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion...4.7 Medium
- sielco analog fm transmitter, radio link, analog fm transmitter exc1000gt firmware +14 more +16 moreSielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +16 more +18 moreBIG-IP Appliance mode external monitor vulnerability8.7 High
- sonicwall netextenderA flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain...8.8 High
- dell powerscale onefsDell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management...7.5 High
- suse rancherRancher vulnerable to Privilege Escalation via manipulation of Secrets9.9 Critical
- pimcore, pimcore pimcore/pimcore +1 morePrivilege Defined With Unsafe Actions in pimcore/pimcore6.5 Medium
- odoo, odoo community, enterprise +2 moreA sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated...8.7 High
- odoo, odoo community, enterprise +2 moreA sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows...8.7 High
- odoo, odoo community, enterprise +2 moreA sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows...8.7 High
- odoo, odoo community, enterprise +2 moreA sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows...6.8 Medium
- sap authenticator, authenticator for android +1 moreInformation Disclosure vulnerability in SAP Authenticator for Android6.1 Medium
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 moreUnwanted debug tool5.7 Medium
- siemens teamcenter v12.4, teamcenter v13.0, teamcenter v13.1 +2 more +4 moreA vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter...7.1 High
- icinga, debian linux, icinga icinga2 +2 moreResults of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities8.8 High
- odoo, odoo community, enterprise +2 moreA sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0,...9.9 Critical
- ericssonlg ipecs, ericsson-lg ipces ucm +1 moreEricssonlg iPECS Privilege Escalation Vulnerability6.5 Medium
- [unknown] keycloakPrivilege Defined With Unsafe Actions in Keycloak6.6 Medium
- [unknown] keycloakKeycloak code execution via UMA policy abuse6.6 Medium
- [unknown] grub2A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...5.9 Medium
- debian linux, linux util-linux, redhat enterprise linux desktop +4 more +6 moreA race condition was found in util-linux before 2.32.1 in the way su handled the management of...5.5 Medium