CWE-842: Placement of User into Incorrect Group
The product or the administrator places a user into an incorrect group.
A kind of CWE-286 Incorrect User Management.
From the CWE List. © The MITRE Corporation.
Newest
- moodle Moodle: group validation missing when enrolling user to course 4.3 Medium
- arista networks eos Security Advisory 0164 7.7 High
- canonical authd authd Denial of Service and Local Privilege Escalation 7.3 High
- ericsson codechecker codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service 8.7 High
- rockwell automation verve® asset manager, rockwellautomation verve asset manager +1 more Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager 8.4 High
- elabftw Unauthorised granting of administrator privileges over arbitrary teams under certain circumstances 8.6 High
- api-platform core Secured properties in API Platform Core may be accessible within collections 7.7 High
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low... 6.3 Medium
- ceph A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to... 7.8 High
- buildah project buildah, redhat enterprise linux, openshift container platform +2 more Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High
- containers podman, redhat enterprise linux, openshift container platform +2 more Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High
- elabftw Privilege escalation from administrator in eLabFTW 4.9 Medium