VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (10,032)

page 99 of 502
  • CVE-2024-6760HigAug 12, 2024
    FreeBSD
    kernel
    risk 0.49cvss 7.5epss 0.01

    A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect the behavior of setuid programs. The bug may be used by an unprivileged user to read the contents…

  • CVE-2024-6805HigJul 22, 2024
    Ni
    VeriStand
    risk 0.49cvss 7.5epss 0.01

    The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.

  • CVE-2024-37111HigJun 24, 2024
    Wishlistmember
    Wishlist Member X
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

  • CVE-2023-38393HigJun 19, 2024
    WordPress
    Ninja Forms
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25.

  • CVE-2023-36516HigJun 19, 2024
    Thimpress
    Learnpress
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.

  • CVE-2023-38386HigJun 19, 2024
    WordPress
    Ninja Forms
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25.

  • CVE-2023-35049HigJun 19, 2024
    WooCommerce
    Stripe Payment Gateway
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.

  • CVE-2023-47770HigJun 19, 2024
    Muffingroup
    Betheme
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1.

  • CVE-2023-45658HigJun 19, 2024
    WordPress
    Nexter
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.

  • CVE-2023-48759HigJun 19, 2024
    Crocoblock
    Jetelements
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13.

  • CVE-2023-48280HigJun 12, 2024
    WordPress
    Consensu Io
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1.

  • CVE-2024-24703HigJun 11, 2024
    WordPress
    WC Marketplace
    risk 0.49cvss 8.6epss 0.00

    Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.

  • CVE-2024-34800HigJun 10, 2024
    WordPress
    Crafthemes Demo Import
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.

  • CVE-2024-31283HigJun 9, 2024
    Zorem
    Advanced Local Pickup For Woocommerce
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

  • CVE-2024-32715HigJun 9, 2024
    Olivethemes
    Olive One Click Demo Import
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

  • CVE-2024-32798HigJun 9, 2024
    Wptravelengine
    Wp Travel Engine
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.

  • CVE-2024-32777HigJun 9, 2024
    bizswoop
    BizPrint
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39.

  • CVE-2024-33563HigJun 9, 2024
    8theme
    Xstore
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

  • CVE-2024-33561HigJun 9, 2024
    8theme
    Xstore
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

  • CVE-2024-33543HigJun 9, 2024
    Codepeople
    Wp Time Slots Booking Form
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.