CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- siteserver sscmsSiteServer SSCMS Agent Installation Workflow access control2.3 Low
- unknown masterstudy lms wordpress pluginMasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN4.8 Medium
- higheredlab hel online classroom: ai-powered online classroomsHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass6.5 Medium
- higheredlab hel online classroom: ai-powered online classroomsHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update6.5 Medium
- unknown appointment booking calendar plugin and scheduling pluginBookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation7.5 High
- basekick-labs arcArc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset6.9 Medium
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true10.0 Critical
- No product listedIncorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...4.3 Medium
- No product listedIncorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu...7.5 High
- No product listedIncorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the getUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...4.3 Medium
- No product listedIncorrect access control in the getSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getWanInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getCrpcCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu...4.3 Medium
- No product listedIncorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...4.3 Medium
- No product listedIncorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- Show moreLoading…