VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,489)

page 186 of 475
  • CVE-2023-42749MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42744MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

  • CVE-2023-42742MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

  • CVE-2023-42741MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42737MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42734MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42733MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42732MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42730MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42714MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42713MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42712MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42711MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42710MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42709MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42708MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42707MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42706MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42705MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

  • CVE-2023-42704MedDec 4, 2023
    risk 0.36cvss 5.5epss 0.00

    In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed