CWE-272: Least Privilege Violation
The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.
A kind of CWE-271 Privilege Dropping / Lowering Errors.
From the CWE List. © The MITRE Corporation.
Newest
- dell alienware command center (awcc) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege... 6.7 Medium
- dell alienware command center (awcc) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege... 7.0 High
- openbsd openssh In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd... 2.9 Low
- gitea Gitea API team demotion not applied to unit permissions 8.1 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 3.4 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 3.4 Low
- hcl software iem HCL IntelliOps Event Management is affected by multiple security vulnerabilities. 6.6 Medium
- dell alienware command center (awcc) Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege... 7.3 High
- dell alienware command center (awcc Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link... 6.0 Medium
- totolink a3000ru, a3100r, a950rg +4 more +6 more TOTOLINK EX200 Web boa.conf least privilege violation 7.7 High
- d-link dir-823g, dlink dir-823g firmware +1 more D-link DIR-823G Web boa.conf least privilege violation 7.7 High
-
kozounpm,@kozou/apinpm,@kozou/corenpm +1 more +3 more Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure) 8.4 High - strimzi strimzi-kafka-operator Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator 5.4 Medium
- totolink ex200 TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation 6.9 Medium
- d-link dgs-1100-08pd, dlink dgs-1100-08pd firmware +1 more D-Link DGS-1100-08PD Web boa.conf least privilege violation 6.3 Medium
- totolink cp450 TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation 5.3 Medium
- d-link dcs-5615, dlink dcs-5615 firmware +1 more D-Link DCS-5615 Boa Webserver boa.conf least privilege violation 6.9 Medium
- totolink ac1200 t8 TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation 5.3 Medium
- d-link dir-823g, dlink dir-823g firmware +1 more D-Link DIR-823G vsftpd vsftpd.conf least privilege violation 5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 more iControl REST and tmsh vulnerability 8.6 High
- dell alienware command center (awcc), alienware command center +1 more Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege... 5.3 Medium
- sudo project sudo, red hat ai inference server 3.3, enterprise linux 10 +25 more +27 more In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... 7.4 High
- brocade fabric os, broadcom fabric operating system +1 more Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b 8.5 High
- dormakaba access manager 92xx-k7, dormakabagroup dormakaba access manager 9200-k5 firmware, dormakaba access manager 9200-k7 firmware +4 more +6 more Web Server Running with Root Privileges in dormakaba access manager 8.8 High
- defenseunicorns pepr Pepr Overly Permissive RBAC ClusterRole in Admin Mode 0.0 None
- jetbrains teamcity In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub... 6.5 Medium
- trendnet tew-822dre TRENDnet TEW-822DRE vsftpd least privilege violation 7.3 High
- trendnet tv-ip110wn TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation 7.3 High
- totolink n600r, x2000r, n600r firmware +1 more +3 more TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation 8.6 High
- steverio social streams Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation 8.8 High
- omron corporation sysmac studio software, machine automation controller nj-series, machine automation controller nx-series +2 more Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers 7.0 High
- notepad-plus-plus Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path 7.3 High
- wibu codemeter, siemens desigo cc family v5.0, desigo cc family v5.1 +11 more +13 more Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation ... 8.2 High
- step-security harden-runner Harden-Runner Evasion of 'disable-sudo' policy 6.0 Medium
- openobserve OpenObserve Improper Authorization Allows Admin User to Remove Root User 8.7 High
- checkmk Privilege escalation in mk_informix plugin 5.2 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 more Local Privilege Escalation 7.8 High
- veritas system recovery Veritas System Recovery before 23.2_Hotfix has incorrect permissions for the Veritas System... 8.4 High
- checkmk Privilege escalation in mk_informix plugin 8.8 High
- checkmk Privilege escalation in mk_oracle plugins 8.2 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Privilege Escalation in mintplex-labs/anything-llm 8.1 High
- openobserve OpenObserve Privilege Escalation Vulnerability in Users API 10.0 Critical
- openobserve OpenObserve Unauthorized Access Vulnerability in Users API 9.1 Critical
- dell display manager Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege... 7.3 High
- dell display manager Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation... 7.3 High
- dell display manager Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion... 6.6 Medium
- valmet dna Remote code execution in Valmet DNA before Collection 2021 8.8 High