CWE-282.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

• Tanium Endpoint Configuration Toolset Solution
• Tanium end-user-cx
• Path traversal
• CWE-282

Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout

• grokability snipe-it
• CWE-282

Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

• pi-hole
• CWE-282

OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

• CWE-282

<16.0.1 · fixed in 16.0.1

An improper ownership management vulnerability has been identified in Moxa’s Secure Router.

• Moxa EDR-8010 Series
• Moxa EDR-G9010 Series
• CWE-282

Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management

• kiteworks core
• CWE-282

Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials

• CWE-282

<=371 · no fixed version yet

JetBrains TeamCity: In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect…

• JetBrains TeamCity
• CWE-282

IBM OpenPages with Watson information disclosure

• IBM OpenPages with Watson
• CWE-282

Nix: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user…

• Nix
• CWE-282

IBM InfoSphere Information Server file manipulation

• IBM InfoSphere Information Server
• CWE-282

PeerTube Arbitrary Playlist Creation via ActivityPub Protocol

• CWE-282

PeerTube Arbitrary Playlist Creation via REST API

• CWE-282

GE Vernova EnerVista UR Setup: CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows…

• GE Vernova EnerVista UR Setup
• CWE-282

Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013

• Drupal Node Access Rebuild Progressive
• CWE-282

Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010

• Drupal Node Access Rebuild Progressive
• CWE-282

IBM OpenPages information disclosure

• IBM OpenPages
• CWE-282

Users can impersonate import requesters if their actor IDs coincide in ImportDump

• miraheze ImportDump
• CWE-282

Veertu Anka Build: A privilege escalation vulnerability exists in the node update functionality of Veertu…

• Veertu Anka Build
• CWE-282

SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

• SourceCodester Online Eyewear Shop
• CWE-282

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.

• Lenovo XClarity Administrator
• CWE-282

A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.

• Lenovo XClarity Administrator
• CWE-282

A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions).

• Siemens Medicalis Workflow Orchestrator
• CWE-282

PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)

• Palo Alto Networks PAN-OS
• Palo Alto Networks Cloud NGFW
• CWE-282

meetyoucrop big-whale Admin Module all.api improper ownership management

• meetyoucrop big-whale
• CWE-282

Improper Ownership Management in GitLab

• GitLab
• CWE-282

Kernel: A flaw was found in the Linux kernel…

• Kernel
• CWE-282

Bypass of safe.directory protections in Git

• git
• CWE-282
• CWE-427

Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability

• Palo Alto Networks Cortex XDR Agent
• CWE-282

ICSA-20-140-02 Emerson OpenEnterprise

• Emerson OpenEnterprise SCADA Software
• CWE-282

Red Hat, Inc. Red Hat JBoss Enterprise Application Platform: It was discovered that the jboss init script as used in Red Hat JBoss Enterprise…

• Red Hat, Inc. Red Hat JBoss Enterprise Application Platform
• CWE-282