CWE-280: Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
A kind of CWE-755 Improper Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- checkmkInsufficient permission validation on multiple REST API Quick Setup endpoints5.3 Medium
- microfocus operations agentPrivilege escalation vulnerability in Operations Agent8.6 High
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreKeycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api4.3 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled4.4 Medium
- google androidIn dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access...8.4 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreRTU500 web interface: An unprivileged user can read user management information. The information...5.3 Medium
- dell update package, update package framework +1 moreDell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper...8.2 High
- moodleMoodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access.8.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Error Reporting Service Elevation of Privilege Vulnerability7.8 High
- automai directorAn issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges9.9 Critical
- checkmkInsufficient permission validation when showing agent information6.3 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- ami aptiov, aptio v +1 moreTCG2 TPM RT Not Locked Issue7.2 High
- checkmkInsufficient permission validation on multiple REST API endpoints5.3 Medium
- checkmkInsufficient permission validation when configuring notification parameters5.3 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR7.5 High
- error311 fileriseFileRise insecure folder visibility via name-based mapping and incomplete ACL checks8.1 High
- error311 fileriseFileRise improper ownership/permission validation allowed cross-tenant file operations8.1 High
- joinmastodon mastodonMastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels4.3 Medium
- dell repository manager (drm), repository manager +1 moreDell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of...7.5 High
- apache zookeeperApache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands4.3 Medium
- enalean tuleapTuleap backlog item representations do not verify the permissions of the child trackers4.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- imagination technologies graphics ddkGPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite9.8 Critical
- imagination technologies graphics ddkGPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation8.8 High
- microsoft teams, teams for android, teams for desktop +1 more +3 moreMicrosoft Teams Elevation of Privilege Vulnerability3.1 Low
- infinera g42Improper File Access in Infinera G428.8 High
- infinera g42, nokia g42 firmware +1 moreImproper File Access in Infinera G426.5 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs4.3 Medium
- fortinet fortipam, fortisra +1 moreA improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through...6.0 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory7.8 High
- lenovo pc manager, pcmanager +1 moreAn improper permission handling vulnerability was reported in Lenovo PC Manager that could allow...6.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreYggdrasil: local privilege escalation in yggdrasil7.8 High
- microsoft dataverseMicrosoft Dataverse Elevation of Privilege Vulnerability7.3 High
- apple macosThe issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia...7.8 High
- schweitzer engineering laboratories sel blueframe osImproper Handling of Insufficient Permissions7.5 High
- huawei harmonyosVulnerability of improper authentication logic implementation in the file system module Impact:...7.8 High
- huawei harmonyosMemory write permission bypass vulnerability in the kernel futex module Impact: Successful...8.8 High
- huawei harmonyosMemory write permission bypass vulnerability in the kernel futex module Impact: Successful...7.8 High
- imagination technologies graphics ddkGPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)7.1 High
- appsmithAn issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have...6.5 Medium
- appsmithAppsmith's Broken Access Control Allows Viewer Role User to Query Datasources4.8 Medium
- b&r industrial automation aprolImproper Handling of Insufficient Permissions or Privileges in B&R APROL6.8 Medium
- imagination technologies graphics ddkGPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object7.8 High
- ibm infosphere information serverIBM InfoSphere Server Information command execution8.4 High
- huawei harmonyosVulnerability of improper access permission in the process management module Impact: Successful...6.8 Medium
- mediatek software development kit, mediatek, inc. mt6880, mt6890, mt6980, mt6990, mt7663, mt7902, mt7925, mt7927, mt7961, openwrt +2 moreIn Bluetooth Stack SW, there is a possible information disclosure due to a missing permission...6.5 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges6.5 Medium
- Show moreLoading…