CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- grokability snipe-itsnipe-it before 8.7.0 Authorization Bypass via Pivot-Only User5.3 Medium
- perforce akanaUnauthenticated Remote Code Execution in Akana API Platform10.0 Critical
- payment plugins for paypal woocommerce, unknown payment plugins for paypal woocommerce +1 morePayment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR5.9 Medium
- tanium complyTanium addressed an improper access controls vulnerability in Comply.4.3 Medium
- tanium serverTanium addressed an improper access controls vulnerability in Tanium Server.4.3 Medium
- tanium complyTanium addressed an improper access controls vulnerability in Comply.8.1 High
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote...9.8 Critical
- google chromeIncorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeIncorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed...8.1 High
- google chromeIncorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36...4.8 Medium
- google chromeIncorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...3.1 Low
- google chromeIncorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a...4.3 Medium
- google chromeIncorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36...6.5 Medium
- google chromeIncorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...8.3 High
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed...6.5 Medium
- google chromeIncorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote...5.3 Medium
- google chromeIncorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote...8.1 High
- google chromeIncorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote...7.5 High
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote...8.8 High
- google chromeIncorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote...3.1 Low
- google chromeIncorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote...4.2 Medium
- google chromeIncorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a...6.5 Medium
- google chromeIncorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote...3.1 Low
- google chromeIncorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...3.1 Low
- google chromeIncorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed...8.3 High
- google chromeIncorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...8.1 High
- google chromeIncorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote...4.2 Medium
- google chromeIncorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote...8.1 High
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeIncorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote...6.5 Medium
- cyrus imap, cyrusimap cyrus imap +1 moreAn issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special...3.5 Low
- cyrusimap cyrus imapAn issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox...4.3 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Incorrect Authorization (CWE-863)6.3 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Incorrect Authorization (CWE-863)8.8 High
- Show moreLoading…