CWE-732

High likelihood

Incorrect Permission Assignment for Critical Resource

Parent: CWE-285 - Improper Authorization

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

1,622 vulnerabilities with CWE-732

CVE-2023-47801 MEDIUM

Clickstudios Passwordstate < 9.8 - Incorrect Permission Assignment

CVSS 4.7

CVE-2023-28134 HIGH

Checkpoint Endpoint Security - Incorrect Permission Assignment

CVSS 7.8

CVE-2023-3282 MEDIUM

Paloaltonetworks Cortex Xsoar - Incorrect Permission Assignment

CVSS 6.4

CVE-2023-5136 MEDIUM

TopoGrafix DataPlugin - Info Disclosure

CVSS 5.5

CVE-2023-46449 HIGH

Mayurik Inventory Management System - Incorrect Permission Assignment

CVSS 8.8

CVE-2023-42861 MEDIUM

Apple Macos < 14.1 - Incorrect Permission Assignment

CVSS 6.5

CVE-2023-42489 HIGH

Busbaer Eisbaer Scada - Incorrect Permission Assignment

CVSS 7.5

CVE-2023-40361 HIGH

Secudos Qiata - Incorrect Permission Assignment

CVSS 7.8

CVE-2023-34437 HIGH

Bakerhughes Bentley Nevada 3500 Syste... - Information Disclosure

CVSS 7.5

CVE-2023-44201 MEDIUM

Juniper Junos < 20.4 - Incorrect Permission Assignment

CVSS 5.0

CVE-2023-32724 CRITICAL

Zabbix < 5.0.36 - Incorrect Permission Assignment

CVSS 9.1

CVE-2023-32723 HIGH

Zabbix < 4.0.19 - Incorrect Permission Assignment

CVSS 8.5

CVE-2023-45205 HIGH

Siemens Sicam Pas/pqs < 8.20 - Incorrect Permission Assignment

CVSS 7.8

CVE-2023-38640 MEDIUM

SICAM PAS/PQS <V8.22 - Privilege Escalation

CVSS 6.6

CVE-2023-42189 HIGH

Tapo Mini Smart Wi-fi Plug Firmware - Incorrect Permission Assignment

CVSS 7.5

CVE-2023-45369 MEDIUM

Mediawiki < 1.35.12 - Incorrect Permission Assignment

CVSS 4.3

CVE-2023-45364 MEDIUM

Mediawiki < 1.39.5 - Incorrect Permission Assignment

CVSS 5.3

CVE-2023-36465 CRITICAL

Decidim <0.26.8, <0.27.4 - Privilege Escalation

CVSS 9.1

CVE-2023-44387 LOW

Gradle < 7.6.3 - Incorrect Permission Assignment

CVSS 3.2

CVE-2023-5077 HIGH

Vault <1.13.0 - Info Disclosure

CVSS 7.6

CVE-2023-20254 HIGH

Cisco Catalyst SD-WAN Manager - Privilege Escalation

CVSS 7.2

CVE-2023-4565 MEDIUM

Framework Module - Info Disclosure

CVSS 5.3

CVE-2023-41295 MEDIUM

Displayengine - Info Disclosure

CVSS 5.3

CVE-2023-4665 HIGH

Adobe Connect < 9.0 - Privilege Escalation

CVSS 8.8

CVE-2023-38557 HIGH

Spectrum Power 7 <V23Q3 - Privilege Escalation

CVSS 8.2

Details

Vulnerabilities 1,622

Exploit Likelihood High

Links