Improper Handling of Insufficient Privileges
CWE-274
The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation.
We track 9 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 9.0.
Latest Improper Handling of Insufficient Privileges vulnerabilities
- 9.9 Critical severity
Cisco Meeting Management: Improper Handling of Insufficient Privileges
A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced up
- 8.8 High severity
ClassCMS: Incorrect Privilege Assignment
A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper hand
- 8.7 High severity
BlueField 1: Improper Handling of Insufficient Privileges
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, dat
- 8.9 High severity
ConnectX4: Improper Handling of Insufficient Privileges
NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
- 7.2 High severity
jupyterhub: Improper Handling of Insufficient Privileges
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The impa
- 8.8 High severity
xwiki-platform: Improper Handling of Insufficient Privileges
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The proble
- 8.8 High severity
security-advisories: Improper Handling of Insufficient Privileges
Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 2
- 9.8 Critical severity
PowerScale OneFS: Improper Privilege Management
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution.
- 9.8 Critical severity
JFrog Artifactory: Improper Privilege Management
JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.