Falhas do tipo CWE-494

163 resultados

Elevação de privilégio

A aplicação não valida corretamente permissões ou contexto de segurança, permitindo que um usuário com privilégios baixos execute ações reservadas a administradores ou usuários com acesso mais elevado. É perigoso porque quebra o modelo de controle de acesso e expõe funcionalidades críticas.

Exemplo

Um usuário comum consegue acessar a API de administração porque o servidor valida apenas a presença de um token válido, ignorando o campo de 'role' contido nele; ou um programa SUID não revoga permissões root antes de executar código fornecido pelo usuário, permitindo leitura de arquivos sensíveis.

Como mitigar

Implemente verificação rigorosa de permissões em toda ação sensível (autorização não apenas autenticação), use listas de controle de acesso (ACL) explícitas, aplique princípio do menor privilégio e audite chamadas privilegiadas. Teste com usuários em papéis baixos para confirmar bloqueios.

CVE-2020-7831HIGHA vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. ThEPSS 0.9%CVE-2023-43608HIGHA data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specialEPSS 0.8%CVE-2023-45838HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45842HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45840HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45841HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2023-45839HIGHMultiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622EPSS 0.8%CVE-2019-19167HIGHTobesoft Nexacro14 ActiveX File Download VulnerabilityEPSS 0.7%CVE-2020-7813HIGHKaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityEPSS 0.7%CVE-2020-7812HIGHKaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityEPSS 0.7%CVE-2020-7806HIGHTobesoft Xplatform ActiveX File Download VulnerabilityEPSS 0.7%CVE-2024-45321CRITICALThe App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.EPSS 0.7%CVE-2020-7826HIGHEyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting EPSS 0.7%CVE-2019-13534—Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501,EPSS 0.7%CVE-2019-19165HIGHAxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by settingEPSS 0.6%CVE-2019-10249—All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been cEPSS 0.6%CVE-2022-45442HIGHSinatra vulnerable to Reflected File Download attackEPSS 0.6%CVE-2025-34212HIGHVasion Print (formerly PrinterLogic) Insecure Build PipelineEPSS 0.6%CVE-2026-42249HIGHRemote Code Execution in Ollama via Update MechanismEPSS 0.6%CVE-2020-7875HIGHRAONWIZ DEXT5 Upload ActiveX remote file execution vulnerabilityEPSS 0.6%