The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,838 vulnerabilities with CWE-269
CVE-2017-1000082
CRITICAL
systemd <233 - Privilege Escalation
CVSS 9.8
CVE-2017-1326
MEDIUM
IBM Sterling File Gateway - Privilege Escalation
CVSS 4.3
CVE-2017-7922
HIGH
Cambium Networks ePMP - Improper Privilege Management via SNMP Community Strings
CVSS 7.6
CVE-2017-7918
MEDIUM
Cambium Networks ePMP - Improper Access Control via SNMP Configuration Export
CVSS 6.8
CVE-2017-4992
CRITICAL
Cloud Foundry Foundation cf-release <v261 - Privilege Escalation
CVSS 9.8
CVE-2017-4991
HIGH
Cloud Foundry Foundation cf-release <v260 - Privilege Escalation
CVSS 7.2
CVE-2017-4973
HIGH
Cloud Foundry Foundation cf-release <v257 - Privilege Escalation
CVSS 8.8
CVE-2017-9324
HIGH
OTRS 3.3.x-5.0.19 - Privilege Escalation
CVSS 8.8
CVE-2017-7312
CRITICAL
Personify360 e-Business <7.6.1 - Info Disclosure
CVSS 9.8
CVE-2017-8438
HIGH
Elastic X-Pack Security 5.0.0-5.4.0 - Improper Privilege Management in run_as Functionality
CVSS 8.8
CVE-2017-7505
HIGH
Foreman <1.5 - Privilege Escalation
CVSS 8.8
CVE-2017-6623
HIGH
Cisco Policy Suite 10.0.0, 10.1.0, 11.0.0 - Authenticated Privilege Escalation via Sudoers Misconfiguration
CVSS 7.8
CVE-2017-7489
MEDIUM
Moodle 2.x-3.x - Privilege Escalation
CVSS 6.3
CVE-2017-4982
CRITICAL
EMC Mainframe Enablers ResourcePak Base <8.1.0 - Privilege Escalation
CVSS 9.8
CVE-2017-5689
CRITICAL
KEV
Intel AMT Digest Authentication Bypass Scanner
CVSS 9.8
CVE-2017-8114
HIGH
Roundcube Webmail < 1.0.11, 1.1.x < 1.1.9, 1.2.x < 1.2.5 - Authenticated Arbitrary Password Reset via Password Plugin
CVSS 8.8
CVE-2017-2094
MEDIUM
Cybozu Garoon 3.0.0-4.2.3 - Authenticated Privilege Escalation in Workflow and MultiReport
CVSS 4.3
CVE-2017-8308
HIGH
Avast Antivirus < 12.3.2279 - Unauthenticated Privilege Escalation via Trusted Process Bypass
CVSS 7.5
CVE-2017-6339
MEDIUM
Trend Micro InterScan Web Security Virtual Appliance < 6.5 CP 1746 - Privilege Escalation via Certificate Handling
CVSS 6.5
CVE-2017-0360
MEDIUM
Tryton 3.x-4.2.2 - Authenticated Arbitrary File Read via Same Root Name Suffix Attack
CVSS 5.3
CVE-2017-5671
HIGH
Honeywell Intermec Printers < 10.11.013310 - Local Privilege Escalation via BusyBox Jailbreak
CVSS 8.8
CVE-2017-6507
MEDIUM
AppArmor < 2.12 - Improper Privilege Management via Profile Handling
CVSS 5.9
CVE-2017-5207
HIGH
Firejail <0.9.44.4 - Privilege Escalation
CVSS 7.8
CVE-2017-5623
MEDIUM
OxygenOS < 4.0.3 - Improper Privilege Management via Fastboot Command
CVSS 6.6
CVE-2017-6954
MEDIUM
BuddyPress Docs <1.9.3 - Privilege Escalation
CVSS 4.3
Details
Vulnerabilities
2,838
Exploit Likelihood
Medium