CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- openstack keystoneOpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Incorrect Authorization issue6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Authorization Bypass6.0 Medium
- openstack keystoneOpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential6.0 Medium
- pimcorePimcore: CustomReports Share Bypass7.1 High
- pimcorePimcore: WordExport Authorization Bypass for Unauthorized Document Export6.4 Medium
- sensiolabs symfony, symfony http-kernel, security-http +2 moreSymfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]8.3 High
- mcdope pam usbpam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass8.1 High
- himmelblau-idm himmelblauHimmelblau: Authentication Bypass via Cross-User Local Session Impersonation in Device Authorization Grant (DAG) Flow8.4 High
- gitlabIncorrect Authorization in GitLab5.3 Medium
- frappe hrmsFrappe HR: Permission Bypass in HRMS Leave Details API6.5 Medium
- budibaseBudibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL8.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization Bypass5.3 Medium
- linux, linux kernel +1 moreKVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L17.9 High
- synology surveillance stationIncorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station...2.7 Low
- frangoteam fuxaFUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass8.9 High
- frangoteam fuxaFUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue7.7 High
- frangoteam fuxaFUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection8.9 High
- sourcecodester edoc doctor appointment systemSourceCodester eDoc Doctor Appointment System delete-session.php authorization6.9 Medium
- ibm engineering lifecycle managementIBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass9.8 Critical
- traccarTraccar: Missing edit authorization on device image upload allows read-only users to write files5.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: FILE privilege was not checked for subqueries in the FROM clause5.0 Medium
- devolutions server, mariadb +1 moreMariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions4.3 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreIncorrect Authorization in CODESYS Control7.2 High
- nousresearch hermes-agentNousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization6.9 Medium
- redaxo cms mediapoolRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload8.7 High
- nezhahq nezhaNezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)7.1 High
- nezhahq nezhaNezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification7.7 High
- goauthentik authentikauthentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/7.1 High
- docker desktopDocker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag8.8 High
- baptistearno typebot.ioTypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions6.5 Medium
- mattermost, mattermost server +1 moreGitHub OAuth Scope Validation5.4 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 Critical
- symfony twigTwig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)5.3 Medium
- nocodbNocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation2.0 Low
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.10 Privilege Escalation via User Update8.7 High
- flux159 mcp-server-kubernetesmcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement8.8 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.14 Privilege Escalation via API Key Generation8.7 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group7.5 High
- mattermost, mattermost server +1 moreInsufficient permission validation on cross-team playbook run creation4.3 Medium
- openbaoOpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL7.1 High
- bestpractical rt, request tracker +1 moreRT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint9.1 Critical
- splunk ai toolkitImproper Access Control through Role Inheritance in Splunk AI Toolkit app6.5 Medium
- flowiseFlowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint5.3 Medium
wgerPyPIwger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None8.5 High- laurent22 joplinJoplin Server delta API returns note content after share access is revoked5.7 Medium
github.com/caddyserver/caddy/v2GoCaddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching4.3 Medium- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends5.3 Medium
- live networks, inc. live555LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token8.2 High
- caddyserver caddyCaddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization5.4 Medium
- Show moreLoading…