Fallos del tipo CWE-863

2369 resultados

Falha na verificação de autorização

O software implementa uma verificação de acesso, mas a lógica está incorreta ou incompleta, permitindo que um usuário acesse recursos ou execute ações que não deveria. O risco é grave porque a autenticação (você é quem diz ser) pode estar correta, mas a autorização (você tem direito a isto?) falha, abrindo brechas para escalação de privilégios ou acesso a dados sensíveis.

Ejemplo

Uma API verifica se o usuário está logado antes de retornar dados de perfil, mas não valida se ele é dono do perfil consultado. Um atacante consegue acessar dados de outros usuários apenas mudando um ID na requisição. Ou um sistema de permissões usa condições OR quando deveria usar AND, liberando acesso para mais atores que o pretendido.

Cómo mitigar

Implemente controle de acesso a cada operação sensível verificando explicitamente se o usuário autenticado tem permissão específica para aquele recurso (não assuma contexto). Use bibliotecas de autorização consolidadas, testes unitários que validem negação de acesso, e revise a lógica de permissões regularmente, especialmente em APIs e operações administrativas.

CVE-2022-36785HIGHD-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.EPSS 1.9%CVE-2022-22967HIGHAn issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows EPSS 1.9%CVE-2024-56431CRITICALoc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by thEPSS 1.9%CVE-2023-27920MEDIUMImproper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and EPSS 1.8%CVE-2021-36039MEDIUMMagento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information DisclosureEPSS 1.7%CVE-2023-21719MEDIUMMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 1.7%CVE-2021-41571—Pulsar Admin API allows access to data from other tenants using getMessageById APIEPSS 1.7%CVE-2024-28098MEDIUMApache Pulsar: Improper Authorization For Topic-Level Policy ManagementEPSS 1.7%CVE-2020-15246HIGHLocal File Inclusion by unauthenticated usersEPSS 1.7%CVE-2017-8907HIGHAtlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permissEPSS 1.7%CVE-2023-36092HIGHAuthentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTEPSS 1.7%CVE-2021-32701HIGHPossible bypass of token claim validation when OAuth2 Introspection caching is enabledEPSS 1.6%CVE-2020-25722—Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flawEPSS 1.6%CVE-2020-36238—The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from vEPSS 1.6%CVE-2017-7505—Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigEPSS 1.6%CVE-2020-25699—In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles witEPSS 1.6%CVE-2017-9855CRITICALAn issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid GuarEPSS 1.6%CVE-2023-23594CRITICALAn authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724_r2 provides remEPSS 1.5%CVE-2017-12197—It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid passwordEPSS 1.5%CVE-2022-30203HIGHWindows Boot Manager Security Feature Bypass VulnerabilityEPSS 1.5%