Falhas do tipo CWE-264

288 resultados

Controle de acesso e privilégios inadequado

Fraqueza ampla onde o software falha em implementar ou enforçar corretamente controles de acesso, permitindo que usuários acessem recursos, funções ou dados além do que deveriam. O erro está em não validar permissões adequadamente, deixando expostos dados sensíveis ou permitindo que usuários executem ações administrativas sem autorização.

Exemplo

Um endpoint de API que lista dados de outros usuários sem verificar se quem requisita tem permissão; um painel administrativo acessível diretamente via URL sem validação de role; um arquivo de backup com permissões world-readable no servidor.

Como mitigar

Implemente validação de permissões em toda operação sensível (whitelist explícita, não blacklist); use modelos de controle como RBAC ou ABAC; aplique o princípio do menor privilégio; audite regularmente as permissões de arquivos, APIs e diretórios do sistema.

CVE-2019-1620CRITICALCisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution VulnerabilityEPSS 83.8%CVE-2017-6622—A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass auEPSS 62.2%CVE-2020-12028HIGHRockwell Automation FactoryTalk View SEEPSS 53.0%CVE-2019-1621HIGHCisco Data Center Network Manager Arbitrary File Download VulnerabilityEPSS 29.8%CVE-2017-6640—A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the EPSS 10.7%CVE-2017-6635—A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticatedEPSS 9.7%CVE-2019-1978MEDIUMCisco Firepower Threat Defense Software Stream Reassembly Bypass VulnerabilityEPSS 9.4%CVE-2017-6637—A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticatedEPSS 7.8%CVE-2019-1723CRITICALCisco Common Services Platform Collector Static Credential VulnerabilityEPSS 5.8%CVE-2020-3229HIGHCisco IOS XE Software Web UI Privilege Escalation VulnerabilityEPSS 5.3%CVE-2017-3831—A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to EPSS 5.3%CVE-2018-0293—A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI coEPSS 4.8%CVE-2018-5472—Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to EPSS 4.6%CVE-2018-5468—Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unaEPSS 4.6%CVE-2020-7352HIGHGOG Galaxy GalaxyClientService Privilege EscalationEPSS 3.8%CVE-2018-11462—A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versEPSS 3.7%CVE-2021-33036—Apache Hadoop Privilege escalation vulnerabilityEPSS 3.6%CVE-2018-13802—A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account accessEPSS 3.6%CVE-2020-3227CRITICALCisco IOx for IOS XE Software Privilege Escalation VulnerabilityEPSS 3.4%CVE-2017-3819—A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 EPSS 3.3%