CWE-274: Improper Handling of Insufficient Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation.
A kind of CWE-755 Improper Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- apache accumulo Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions 5.7 Medium
- amd instinct™ mi210, instinct™ mi250, radeon™ pro v520 +2 more +4 more Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an... 5.3 Medium
- apache openmeetings Apache OpenMeetings: Insufficient checks in FileWebService 4.3 Medium
- joinmastodon mastodon Mastodon streaming API fails to disconnect disabled and suspended users 4.3 Medium
- amd instinct™ mi210, instinct™ mi250, radeon™ instinct™ mi25 graphics products +2 more +4 more Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to... 3.3 Low
- spimsimulator spim spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL. 9.8 Critical
- apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... 6.2 Medium
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Image Verification Bypass Vulnerability 6.7 Medium
- imagination technologies graphics ddk GPU DDK - Arbitrary write of read-only dmabuf 7.8 High
- cisco meeting management Cisco Meeting Management Client-Server Privilege Escalation Vulnerability 9.9 Critical
- classcms ClassCMS User Management Page admin insufficient privileges 5.1 Medium
- nvidia bluefield 1, bluefield ga, bluefield lts22 +1 more +3 more NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a... 8.7 High
- nvidia bluefield 1, bluefield ga, bluefield lts22 +6 more +8 more NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper... 8.9 High
- jupyter jupyterhub JupyterHub has a privilege escalation vulnerability with the `admin:users` scope 7.2 High
- cisco ios xe software, ios xe +1 more A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged,... 5.5 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki has no right protection on rollback action 8.0 High
- siberiancms SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges 7.5 High
- dell powerscale onefs Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges... 6.7 Medium
- nextcloud server, kiteworks security-advisories +1 more Nextcloud user scoped external storage can be used to gather credentials of other users 8.5 High
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges... 7.3 High
- jfrog artifactory JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to... 5.3 Medium
- amazon cloudwatch agent, aws amazon-cloudwatch-agent +1 more Amazon CloudWatch Agent for Windows has Privilege Escalation Vector 7.1 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Insufficient privilege checks on object access and updates. 5.4 Medium
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient... 5.4 Medium
- secomea gatemanager GateManager information leak for LinkManager Users 5.0 Medium
- hitachi energy gms600, pwc600, relion 650 +8 more +10 more Insufficient Security Control Vulnerability 7.2 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 more Insecure Windows Services in Symphony Plus 7.8 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 more Privilege Escalation vulnerability in McAfee Total Protection (MTP) 7.5 High
- mcafee active response, mcafee,llc mcafee active response (mar) for linux +1 more Privilege Escalation vulnerability in MAR for Linux 7.8 High
- mcafee active response, mcafee,llc mcafee active response (mar) for mac +1 more Privilege Escalation vulnerability MAR for Mac 7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for linux, mcafee endpoint detection and response +1 more Privilege Escalation vulnerability in EDR for Linux 7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for mac, mcafee endpoint detection and response +1 more Privilege Escalation vulnerability in EDR for Mac 7.8 High
- mcafee active response, mcafee,llc mcafee active response (mar) for windows +1 more Privilege Escalation vulnerability in MAR for Windows 7.8 High
- mcafee mvision endpoint, mcafee,llc mcafee mvision endpoint +1 more Privilege Escalation vulnerability in MVISION Endpoint 7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for windows, mcafee endpoint detection and response +1 more Privilege Escalation vulnerability in EDR for Windows 7.8 High
- mcafee virusscan enterprise, mcafee,llc mcafee virusscan enterprise (vse) for linux +1 more Privilege Escalation vulnerability through symbolic links in VSEL 8.8 High
- mcafee virusscan enterprise, mcafee,llc mcafee virusscan enterprise (vse) for windows +1 more Privilege Escalation vulnerability through symbolic links in VSE for Windows 8.8 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for mac +1 more Privilege Escalation vulnerability through symbolic links in ENSM 8.8 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 more Privilege Escalation vulnerability through symbolic links in ENS for Windows 8.8 High
- mcafee application and change control, application control and change control (macc) +1 more McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass 4.4 Medium
- mcafee endpoint security for linux threat prevention (ensltp), endpoint security for linux threat prevention, endpoint security linux threat prevention +2 more Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability 5.6 Medium
- mcafee virusscan enterprise, mcafee, llc virusscan enterprise (vse) +1 more Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges 6.8 Medium