Improper Isolation or Compartmentalization
CWE-653
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
We track 56 vulnerabilities of this type. 98% are rated high or critical, and the average CVSS score is 8.6. 1 has been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.
Latest Improper Isolation or Compartmentalization vulnerabilities
- 7.5 High severity
com.palantir.compute:compute-service: Improper Isolation or Compartmentalization
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Con
- 7.2 High severity
Apache Syncope: Improper Isolation or Compartmentalization
Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being p
- 7.8 High severity
Print Virtual Appliance Host: Improper Isolation or Compartmentalization
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows dire
- 7.8 High severity
Intel(R) Processors: Improper Isolation or Compartmentalization
Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
- 8.8 High severity
XAV-AX8500: Improper Isolation or Compartmentalization
Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. T
- 7.8 High severity
FortiClientMac: Improper Isolation or Compartmentalization
An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to injec
- 9.1 Critical severity
Firefox: Improper Isolation or Compartmentalization
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerabili
- 7.1 High severity
M-Files Server: Improper Isolation or Compartmentalization
Improper isolation of users in M-Files Server version before 25.3.14549 allows anonymous user to affect other anonymous users views and possibly cause a denial of service
- 9.8 Critical severity
ingress-nginx: Improper Isolation or Compartmentalization
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets
- 4.4 Medium severity
Juniper Junos OS Improper Isolation or Compartmentalization Exploited
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary
- 8.4 High severity
NVIDIA Container Toolkit: Improper Isolation or Compartmentalization
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit i
- 7.6 High severity
NVIDIA Container Toolkit: Improper Isolation or Compartmentalization
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of
- 8.8 High severity
Cisco NX-OS Software: Improper Isolation or Compartmentalization
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due
- 8.2 High severity
Artemis Java Test Sandbox: Improper Isolation or Compartmentalization
Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sand
- 8.2 High severity
Artemis Java Test Sandbox: Trust Boundary Violation
Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed c
- 8.1 High severity
InsightCloudSec: Improper Isolation or Compartmentalization
An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2