CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (10,032)
page 64 of 502| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-38449 | Hig | 0.51 | 7.8 | 0.00 | Sep 4, 2023 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||
| CVE-2023-38444 | Hig | 0.51 | 7.8 | 0.00 | Sep 4, 2023 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||
| CVE-2023-38443 | Hig | 0.51 | 7.8 | 0.00 | Sep 4, 2023 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||
| CVE-2023-24674 | Hig | 0.51 | 7.8 | 0.00 | Sep 1, 2023 | Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter. | ||
| CVE-2023-21257 | Hig | 0.51 | 7.8 | 0.00 | Jul 13, 2023 | In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… | ||
| CVE-2023-21248 | Hig | 0.51 | 7.8 | 0.00 | Jul 13, 2023 | In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User… | ||
| CVE-2023-21247 | Hig | 0.51 | 7.8 | 0.00 | Jul 13, 2023 | In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.… | ||
| CVE-2023-30929 | Hig | 0.51 | 7.8 | 0.00 | Jul 12, 2023 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2023-30928 | Hig | 0.51 | 7.8 | 0.00 | Jul 12, 2023 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2023-30917 | Hig | 0.51 | 7.8 | 0.00 | Jul 12, 2023 | In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2023-30916 | Hig | 0.51 | 7.8 | 0.00 | Jul 12, 2023 | In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2023-36624 | Hig | 0.51 | 7.8 | 0.00 | Jul 5, 2023 | Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement. | ||
| CVE-2023-20773 | Hig | 0.51 | 7.8 | 0.00 | Jul 4, 2023 | In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07611449; Issue ID: ALPS07441735. | ||
| CVE-2023-21185 | Hig | 0.51 | 7.8 | 0.00 | Jun 28, 2023 | In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2023-21149 | Hig | 0.51 | 7.8 | 0.00 | Jun 28, 2023 | In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… | ||
| CVE-2023-21123 | Hig | 0.51 | 7.8 | 0.00 | Jun 15, 2023 | In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||
| CVE-2023-21122 | Hig | 0.51 | 7.8 | 0.00 | Jun 15, 2023 | In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||
| CVE-2023-30864 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2023-30863 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | ||
| CVE-2022-48392 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
- risk 0.51cvss 7.8epss 0.00
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- risk 0.51cvss 7.8epss 0.00
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- risk 0.51cvss 7.8epss 0.00
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- risk 0.51cvss 7.8epss 0.00
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter.
- risk 0.51cvss 7.8epss 0.00
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
- risk 0.51cvss 7.8epss 0.00
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User…
- risk 0.51cvss 7.8epss 0.00
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.…
- risk 0.51cvss 7.8epss 0.00
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.
- risk 0.51cvss 7.8epss 0.00
In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07611449; Issue ID: ALPS07441735.
- risk 0.51cvss 7.8epss 0.00
In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.51cvss 7.8epss 0.00
In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
- risk 0.51cvss 7.8epss 0.00
In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…
- risk 0.51cvss 7.8epss 0.00
In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…
- risk 0.51cvss 7.8epss 0.00
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.