CWE-268: Privilege Chaining
Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- fsas technologies inc. serverview agents for windows Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this... 8.5 High
- canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 more Local Privilege Escalation in snapd 7.8 High
- qualitysoft corporation qnd premium/advance/standard QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability,... 8.5 High
- rockwell automation factorytalk® viewpoint Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability 8.5 High
- ibm websphere application server liberty, websphere application server +1 more IBM WebSphere Application Server Liberty bypass security 5.9 Medium
- beyondtrust privilege management for windows Privilege Management for Windows - Elevation of Privilege 7.2 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Information Disclosure Vulnerability 7.4 High
- cisco emergency responder, finesse, prime collaboration deployment +7 more +9 more Cisco Unified Communications Products Privilege Escalation Vulnerability 5.1 Medium
- step-security harden-runner Harden-Runner Evasion of 'disable-sudo' policy 6.0 Medium
- perforce delphix Privilege Chaining in Delphix 8.5 High
- argoproj argo-events Users can gain privileged access to the host system and cluster with EventSource and Sensor CR 10.0 Critical
- openvpn OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to... 8.8 High
- beyondtrust privilege management for windows Privilege Management for Windows – Elevation of Privilege 7.2 High
- e-tax.nta e-tax, national tax agency the installer of e-tax software(common program) +1 more User interface (UI) misrepresentation of critical information issue exists in multiple Home... 7.8 High
-
silverstripe/frameworkPackagist silverstripe/framework Privilege Escalation Risk in Member Edit form 6.5 Medium - gitlab Privilege Chaining in GitLab 6.5 Medium
- gitlab Privilege Chaining in GitLab 6.5 Medium
- hestiacp, hestiacp hestiacp/hestiacp, control panel +2 more Privilege Chaining in hestiacp/hestiacp 8.8 High
- cisco identity services engine software, identity services engine +1 more A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read... 4.9 Medium
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 more Command Authentication Bypass in Z/IP Gateway 9.6 Critical
- linuxfoundation open cluster management A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes... 6.7 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Privilege Chaining in cockpit-hq/cockpit 5.3 Medium
- mattermost Sysadmin can override existing configs & bypass restrictions like EnableUploads 3.3 Low
- area17 area17/twill, twill +1 more Cross-Site Request Forgery (CSRF) in area17/twill 6.3 Medium
- [freedesktop.org] systemd, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 more It was discovered that a systemd service that uses DynamicUser property can get new privileges... 4.5 Medium