CWE-273: Improper Check for Dropped Privileges
The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
A kind of CWE-754 Improper Check for Unusual or Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper... 8.8 High
- freebsd Multiple jail filesystem root escapes 9.8 Critical
- freebsd Multiple jail filesystem root escapes 8.8 High
- freebsd Multiple jail filesystem root escapes 7.1 High
- hugging face transformers Hugging Face Transformers library writes remote code to disk prior to consent check 7.8 High
- freebsd hwpmc fails to detach PMCs during exec credential transitions 7.8 High
- freebsd ktrace(2) privilege incorrectly validated in jails 8.1 High
- freebsd unlinkat(2) ignores AT_RESOLVE_BENEATH flag 7.1 High
- canonical accountsservice accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts 7.8 High
- amoffat sh sh _uid does not drop supplementary groups (incomplete privilege drop) 7.9 High
- mervinpraison praisonai PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox 8.7 High
- google android In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from... 7.8 High
- netatalk seteuid failure ignored in auth modules 4.0 Medium
- uutils coreutils uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership 4.4 Medium
- neutrinolabs xrdp xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails 8.8 High
- asfhtgkdavid theshit theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution 8.4 High
- joinmastodon mastodon Mastodon streaming API fails to disconnect disabled and suspended users 4.3 Medium
- suse opensuse tumbleweed The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess 4.8 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 more A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0... 8.7 High
- hp, inc. hp anyware linux agent HP Anyware Agent for Linux – Potential Authentication Bypass 8.5 High
- microsoft edge update, edge update setup +1 more Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability 7.4 High
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability 7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more Internal browser event interfaces were exposed to web content when privileged EventHandler... 8.8 High
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7 +2 more Keycloak: impersonation via logout token exchange 3.4 Low
- mattermost, mattermost server +1 more Users maintain access to active call after being removed from a channel 3.1 Low
- igniterealtime openfire Ignite Realtime Openfire privilege escalation vulnerability 7.2 High
- linux, linux kernel +1 more netfilter: nft_ct: skip expectations for confirmed conntrack 7.8 High
- linux, linux kernel, netapp ontap tools +2 more netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction 7.8 High
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 more An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a... 5.5 Medium
- freebsd copy_file_range insufficient capability rights check 7.1 High
- xen top-level shadow reference dropped too early for 64-bit PV guests 7.8 High
- google android In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during... 7.8 High
- google android In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification... 3.3 Low
- play with docker project with docker Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker... 9.8 Critical
- apache superset Improper access to dataset metadata information 4.3 Medium
- qemu, redhat enterprise linux +1 more A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This... 7.8 High
- gnome gnome-shell Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation... 5.5 Medium
- apache ozone Original block tokens are persisted and can be retrieved 9.8 Critical
- hcc-embedded nichestack An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c... 7.5 High
- snmptt, debian linux +1 more SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec. 9.8 Critical
- [unknown] docker, redhat enterprise linux server +1 more The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise... 8.8 High
- [unknown] docker, redhat enterprise linux server, openshift container platform +2 more The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053... 8.8 High
- zsh, apple ipados, iphone os +5 more +7 more In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no... 7.8 High
- [unknown] moodle Moodle does not revoke role capabilities correctly 4.2 Medium
- gnu bash, netapp hci management node, oncommand unified manager +5 more +7 more An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By... 7.8 High
- marmaro masqmail masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that... 9.8 Critical
- ktsuss ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to... 9.8 Critical
- bitlbee Bitlbee does not drop extra group privileges correctly in unix.c 9.8 Critical
- microsoft visual studio, windows 10, windows 10 servers +3 more +5 more An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector... 7.8 High
- hackerone nextcloud server, nextcloud server +1 more Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead... 8.1 High
- Show olderLoading…