VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (10,032)

page 67 of 502
  • CVE-2022-39100HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39099HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39098HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39097HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39096HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39095HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39094HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39093HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39092HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39091HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-39090HigDec 6, 2022
    risk 0.51cvss 7.8epss 0.00

    In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

  • CVE-2022-20451HigNov 8, 2022
    risk 0.51cvss 7.8epss 0.00

    In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:…

  • CVE-2022-20450HigNov 8, 2022
    risk 0.51cvss 7.8epss 0.00

    In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2022-39111HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.

  • CVE-2022-39110HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.

  • CVE-2022-39109HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.

  • CVE-2022-39108HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.

  • CVE-2022-39107HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.

  • CVE-2022-39080HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.

  • CVE-2022-38698HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.