CWE-653: Separation of Privilege
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
Also known as Improper Isolation or Compartmentalization.
A kind of CWE-657 Violation of Secure Design Principles.
From the CWE List. © The MITRE Corporation.
Newest
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.25 +2 moreLlama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode component10.0 Critical
- servicenow ai platformRemote Code Execution in ServiceNow AI Platform9.2 Critical
mcp-run-pythonPyPILack of isolation in mcp-run-python leads to MCP server takeover5.8 Medium- palantir com.palantir.codeassist2:code-assist-proxy, com.palantir.compute:compute-service +1 moreNetwork boundaries not respected in certain Foundry namespaces.7.5 High
- fortinet fortisandboxAn Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5...5.0 Medium
- grafana labs databricks datasource pluginIncorrect oauth passthrough in Grafana Databricks Datasource2.1 Low
- grafana labs snowflake datasource pluginIncorrect oauth passthrough in Grafana Snowflake Datasource2.1 Low
dspyPyPIInsecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox5.9 Medium- apache syncopeApache Syncope: Remote Code Execution by delegated administrators7.2 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances8.5 High
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R)...7.3 High- helmholz rex 200/250, rex 300, mb connect line mbnet hw1 +1 more +3 moreHigh Privilege RCE via LUA Sandbox Escape7.2 High
- radiflow isap smart collectorRestricted shell evasion in Radiflow iSAP Smart Collector4.1 Medium
- eclipse open vsx, eclipse foundation open vsx registry, openvsx +2 moreOn open-vsx.org http://open-vsx.org/ it was possible to run an arbitrary build scripts for auto...7.6 High
- sony xav-ax8500, xav-ax8500 firmware +1 moreSony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability6.3 Medium
- fortinet forticlient, forticlientmac, fortivoiceucdesktop +1 more +3 moreAn improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7...2.3 Low
- mozilla firefox, thunderbird +1 moreProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Critical
- m-files serverUser in anonymous role could create and delete views6.3 Medium
- kubernetes ingress-nginxingress-nginx admission controller RCE escalation9.8 Critical
- metal3-io baremetal-operatorBare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD6.5 Medium
- solarwinds service deskSolarWinds Service Desk Broken Access Control Vulnerability5.4 Medium
- juniper junos, junos os +1 moreJunos OS: An local attacker with shell access can execute arbitrary code6.7 Medium
- microsoft azure promptflow-core, azure promptflow-tools, azure promptflow core +1 more +3 moreAzure Promptflow Remote Code Execution Vulnerability6.5 Medium
- sammycage lunasvglunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell6.5 Medium
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted...5.5 Medium
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted...7.6 High
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted...7.6 High
- sammycage lunasvglunasvg v3.0.0 was discovered to contain a segmentation violation via the component...6.5 Medium
- sammycage lunasvglunasvg v3.0.0 was discovered to contain a segmentation violation via the component...6.5 Medium
- sammycage lunasvglunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.6.5 Medium
- arista ng firewall, arista networks edge threat management +1 moreA user with advanced report application access rights can perform actions for which they are not authorized7.6 High
- nofusscomputing centurion erpUser can view tickets from organizations they're not apart of in centurion_erp1.9 Low
- lonelycoder vmirvmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse...5.5 Medium
- nofusscomputing centurion erpCenturion ERP user can view projects from organizations they're not apart of4.1 Medium
- grafanaGrafana alerting wrong permission on datasource rule write endpoint5.1 Medium
- metal3-io baremetal-operatorBMO can expose particularly named secrets from other namespaces via BMH CRD4.9 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Escape Vulnerability5.3 Medium
- b&r industrial automation automation runtimeIP Forwarding enabled in B&R Automation Runtime5.3 Medium
- gitlabImproper Isolation or Compartmentalization in GitLab7.5 High
- sammycage lunasvglunasvg v2.3.9 was discovered to contain a segmentation violation via the component...9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps7.1 High
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreIncomplete container isolation6.0 Medium
- yasm project yasmyasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component...5.5 Medium
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec box object access8.1 High
- ls1intum artemis java test sandboxArtemis Java Test Sandbox Class Loading Escape8.2 High
- ls1intum artemis java test sandboxArtemis Java Test Sandbox InvocationTargetException Subclass Escape8.2 High