Advisories · Weakness

CWE-1220.

Every Advisory and CVE whose sources give the weakness CWE-1220, newest first.

CVE-2023-32259 CVE record

CVSS 6.5 Medium

Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.
- OpenText™ Service Management Automation X (SMAX)
- OpenText™ Asset Management X (AMX)
- CWE-1220
Not analysed yet 19 Mar 2024
CVE-2023-6725 CVE record

CVSS 5.5 Medium

Tripleo-ansible: bind keys are world readable
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- CWE-1220
Not analysed yet 15 Mar 2024
CVE-2024-26246 CVE record

CVSS 3.9 Low

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- Microsoft Edge for Android
- CWE-1220
Not analysed yet 14 Mar 2024
CVE-2024-2412 CVE record

CVSS 5.3 Medium

Heimavista Rpage and Epage - Broken Access Control
- Heimavista Rpage
- Heimavista Epage
- CWE-1220
Not analysed yet 13 Mar 2024
CVE-2023-50713 CVE record

CVSS 6.5 Medium

Speckle Server API Token Privilege Escalation
- specklesystems speckle-server
- CWE-1220
Not analysed yet 14 Dec 2023
CVE-2023-44285 CVE record

CVSS 7.8 High

Dell PowerProtect DD: Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15…
- Dell PowerProtect DD
- CWE-1220
Not analysed yet 14 Dec 2023
CVE-2023-4456 CVE record

CVSS 5.7 Medium

Openshift-logging: lokistack authorisation is cached too broadly
- Red Hat RHOL-5.5-RHEL-8
- Red Hat RHOL-5.6-RHEL-8
- CWE-1220
Not analysed yet 21 Aug 2023
CVE-2023-39418 CVE record

CVSS 3.1 Low

Postgresql: merge fails to enforce update or select row security policies
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.8 Extended Update Support
- CWE-1220
Not analysed yet 11 Aug 2023
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.1 High

Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
- CWE-1220
>=6.0.0, <6.0.20 || >=7.0.0, <7.0.9 · fixed in 6.0.20, 7.0.9

GHSA-485r-rp8v-998v · CVE-2023-33127 Not analysed yet 11 Jul 2023
CVE-2023-3227 CVE record

CVSS 5.4 Medium

Insufficient Granularity of Access Control in fossbilling/fossbilling
- fossbilling/fossbilling
- CWE-1220
Not analysed yet 14 Jun 2023
CVE-2023-0205 CVE record

CVSS 5.0 Medium

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denia…
- NVIDIA ConnectX Firmware
- CWE-1220
Not analysed yet 22 Apr 2023
CVE-2023-0203 CVE record

CVSS 5.0 Medium

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denia…
- NVIDIA ConnectX Firmware
- CWE-1220
Not analysed yet 22 Apr 2023
CVE-2022-2475 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.
- Haas CNC Controller
- CWE-1220
Not analysed yet 28 Oct 2022
jsdom npm

CVSS 0.0 None

Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom
- CWE-1220
<16.5.0 · fixed in 16.5.0

GHSA-f4c9-cqv8-9v98 · CVE-2021-20066 Withdrawn Not analysed yet 24 May 2022
CVE-2022-1461 CVE record

CVSS 8.1 High

Non Privilege User can Enable or Disable Registered in openemr/openemr
- openemr/openemr
- CWE-1220
Not analysed yet 25 Apr 2022
CVE-2022-1177 CVE record

CVSS 6.5 Medium

Accounting User Can Download Patient Reports in openemr in openemr/openemr
- openemr/openemr
- CWE-1220
Not analysed yet 30 Mar 2022
CVE-2021-31384 CVE record

CVSS 7.2 High

Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service
- Juniper Networks Junos OS
- Broken access control
- CWE-551
Not analysed yet 19 Oct 2021