Fallos del tipo CWE-494

163 resultados

Escalação de privilégio

Fraqueza que permite a um atacante ou processo não-autorizado obter permissões superiores àquelas inicialmente concedidas. A aplicação falha em validar ou restringir adequadamente quem pode executar operações sensíveis, permitindo que um usuário comum acesse funcionalidades administrativas ou recursos protegidos.

Ejemplo

Um aplicativo web que não verifica se o usuário logado é realmente um administrador antes de processar requisições para deletar contas ou alterar configurações do sistema. Um atacante autenticado como usuário comum pode forjar uma requisição para /admin/delete-user e conseguir sucesso porque o servidor não valida o nível de privilégio.

Cómo mitigar

Implemente validação rigorosa de autorização em toda operação sensível (não confie apenas em ocultação de interfaces). Use controle de acesso baseado em papéis (RBAC) ou atributos (ABAC), verifique permissões no servidor a cada requisição, e mantenha logs de acessos privilegiados para auditoria.

CVE-2020-7831HIGHA vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. ThEPSS 0.9%CVE-2023-43608HIGHA data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specialEPSS 0.8%CVE-2023-45838HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45840HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45842HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45841HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45839HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2019-19167HIGHTobesoft Nexacro14 ActiveX File Download VulnerabilityEPSS 0.7%CVE-2020-7813HIGHKaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityEPSS 0.7%CVE-2020-7812HIGHKaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityEPSS 0.7%CVE-2020-7806HIGHTobesoft Xplatform ActiveX File Download VulnerabilityEPSS 0.7%CVE-2024-45321CRITICALThe App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.EPSS 0.7%CVE-2020-7826HIGHEyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting EPSS 0.7%CVE-2019-13534—Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501,EPSS 0.7%CVE-2019-19165HIGHAxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by settingEPSS 0.6%CVE-2019-10249—All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been cEPSS 0.6%CVE-2022-45442HIGHSinatra vulnerable to Reflected File Download attackEPSS 0.6%CVE-2025-34212HIGHVasion Print (formerly PrinterLogic) Insecure Build PipelineEPSS 0.6%CVE-2026-42249HIGHRemote Code Execution in Ollama via Update MechanismEPSS 0.6%CVE-2020-7875HIGHRAONWIZ DEXT5 Upload ActiveX remote file execution vulnerabilityEPSS 0.6%