CWE-273 Improper Check for Dropped Privileges
baseThe product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (53)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-38813US | critical9.8OT kritisch | KEV | ||
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to r… | ||||
| CVE-2011-2921US | critical9.8 | Exploit | ||
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privi… | ||||
| CVE-2017-6972US | critical9.8 | Exploit | ||
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945… | ||||
| CVE-2019-18276US | high7.8 | Exploit | ||
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop… | ||||
| CVE-2015-0278US | high10.0 | — | ||
libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. | ||||
| CVE-2021-36372US | critical9.8 | — | ||
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to th… | ||||
| CVE-2020-24361US | critical9.8 | — | ||
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec. | ||||
| CVE-2011-3350US | critical9.8 | — | ||
masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping. | ||||
| CVE-2012-1187US | critical9.8 | — | ||
Bitlbee does not drop extra group privileges correctly in unix.c | ||||
| CVE-2023-34844US | critical9.8 | — | ||
Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape. | ||||
| CVE-2021-41617US | high7.0OT erhöht | Exploit | ||
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expecte… | ||||
| CVE-2024-8382US | high8.8 | — | ||
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces w… | ||||
| CVE-2020-14300US | high8.8 | — | ||
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)… | ||||
| CVE-2020-14298US | high8.8 | — | ||
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which w… | ||||
| CVE-2018-16466US | high8.1 | — | ||
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens. | ||||
| CVE-2023-34322US | high7.8 | — | ||
For migration as well as to work around kernels unaware of L1TF (see
XSA-273), PV guests may be run in shadow paging mode. Since Xen itself
needs to be mapped when PV guests run,… | ||||
| CVE-2023-35692US | high7.8 | — | ||
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escalat… | ||||
| CVE-2022-0358US | high7.8OT erhöht | — | ||
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in… | ||||
| CVE-2019-20044US | high7.8 | — | ||
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges… | ||||
| CVE-2018-8599US | high7.8 | — | ||
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Co… | ||||
03
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan