CWE-282: Improper Ownership Management
The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- tanium end-user-cx, endpoint configuration toolset solution +1 more Tanium addressed a local privilege escalation vulnerability in End-User Notifications. 7.8 High
- grokability snipe-it Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout 5.3 Medium
- pi-hole Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate` 8.8 High
- openstack cyborg OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer 6.3 Medium
- moxa edr-8010 series, edr-g9010 series +1 more An improper ownership management vulnerability has been identified in Moxa’s Secure Router.... 6.0 Medium
- accellion kiteworks, kiteworks core +1 more Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management 8.8 High
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 more Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials 4.3 Medium
- jetbrains teamcity In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect... 7.5 High
- ibm openpages with watson IBM OpenPages with Watson information disclosure 4.3 Medium
- nixos nix The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can... 2.9 Low
- ibm infosphere information server IBM InfoSphere Information Server file manipulation 4.3 Medium
- framasoft peertube PeerTube Arbitrary Playlist Creation via ActivityPub Protocol 5.3 Medium
- framasoft peertube PeerTube Arbitrary Playlist Creation via REST API 4.3 Medium
- ge vernova enervista ur setup Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication... 8.0 High
- drupal node access rebuild progressive, node access rebuild progressive project access rebuild progressive +1 more Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013 5.4 Medium
- ibm openpages, openpages with watson +1 more IBM OpenPages information disclosure 5.4 Medium
- miraheze importdump Users can impersonate import requesters if their actor IDs coincide in ImportDump 6.4 Medium
- veertu anka build, anka build cloud +1 more A privilege escalation vulnerability exists in the Veertu Anka Build 1.42.0. The vulnerability... 7.8 High
- oretnom23 online eyewear shop SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management 5.3 Medium
- lenovo xclarity administrator A valid, authenticated LXCA user without sufficient privileges may be able to use the device... 6.3 Medium
- lenovo xclarity administrator A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the... 4.3 Medium
- siemens medicalis workflow orchestrator A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The... 8.5 High
- ibm security guardium IBM Security Guardium privilege escalation 7.8 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 more PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) 7.4 High
- drupal node access rebuild progressive, node access rebuild progressive project access rebuild progressive +1 more Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010 5.3 Medium
- meetyoucrop big-whale, meiyou big whale +1 more meetyoucrop big-whale Admin Module all.api improper ownership management 6.3 Medium
- gitlab Improper Ownership Management in GitLab 4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 more A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid... 7.8 High
- cisco sd-wan, catalyst sd-wan manager, catalyst sd-wan +5 more +7 more Cisco SD-WAN Software Privilege Escalation Vulnerability 7.8 High
- git, apple xcode, debian linux +1 more +3 more Bypass of safe.directory protections in Git 7.8 High
- palo alto networks cortex xdr agent Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability 6.7 Medium
- emerson openenterprise scada software, openenterprise scada server +1 more ICSA-20-140-02 Emerson OpenEnterprise 8.8 High
- red hat jboss enterprise application platform, red hat, inc. hat jboss enterprise application platform, redhat enterprise linux +2 more It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application... 7.8 High