Advisories · Weakness

CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

CVE-2022-46762 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 6 Jan 2023
CVE-2022-47544 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An issue was discovered in Siren Investigate before 12.1.7.
- CWE-693
Not analysed yet 5 Jan 2023
CVE-2022-26384 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693
Not analysed yet 22 Dec 2022
CVE-2022-22761 CVE record

CVSS 8.8 High

Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 22 Dec 2022
CVE-2022-22759 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 22 Dec 2022
CVE-2022-20562 CVE record

CVSS 3.3 Low

Protection mechanism failure in Android
- Android
- CWE-693
Not analysed yet 16 Dec 2022
CVE-2022-46698 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple iCloud for Windows and others
- Apple iCloud for Windows
- Apple tvOS
- CWE-693
Not analysed yet 15 Dec 2022
CVE-2022-42848 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple tvOS
- Apple tvOS
- CWE-693
Not analysed yet 15 Dec 2022
CVE-2022-42821 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 15 Dec 2022
CVE-2022-32537 CVE record

CVSS 4.8 Medium

Medtronic MiniMed 600 Series Pump System Communication Issue
- Medtronic Minimed 600 Series Insulin Pump
- CWE-693
Not analysed yet 17 Nov 2022
CVE-2021-31608 CVE record

CVSS 4.3 Medium

Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.
- CWE-693
Not analysed yet 17 Nov 2022
CVE-2022-33942 CVE record

CVSS 8.8 High

Protection mechanism failure in Intel(R) DCM software
- Intel(R) DCM software
- CWE-693
Not analysed yet 11 Nov 2022
CVE-2022-27516 CVE record

CVSS 5.3 Medium

User login brute force protection functionality bypass
- Citrix Gateway, Citrix ADC
- CWE-693
Not analysed yet 8 Nov 2022
CVE-2022-42801 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS and others
- Apple macOS
- Apple tvOS
- CWE-693
Not analysed yet 1 Nov 2022
CVE-2022-32910 CVE record

CVSS 7.5 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 1 Nov 2022
com.compuware.jenkins:compuware-topaz-for-total-test Maven

CVSS 7.5 High

Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin
- CWE-610
- CWE-693
<2.4.9 · fixed in 2.4.9

GHSA-xp3r-9wx8-q2mm · CVE-2022-43428 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:xframium Maven

CVSS 8.8 High

Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin
- CWE-693
<=1.0.22 · no fixed version yet

GHSA-px4x-hjm5-w8x3 · CVE-2022-43432 Not analysed yet 19 Oct 2022
com.compuware.jenkins:compuware-xpediter-code-coverage Maven

CVSS 4.3 Medium

Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin
- CWE-693
<1.0.8 · fixed in 1.0.8

GHSA-mfcw-83qg-4vw3 · CVE-2022-43424 Not analysed yet 19 Oct 2022
io.jenkins.plugins:screenrecorder Maven

CVSS 8.0 High

Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin
- CWE-693
<=0.7 · no fixed version yet

GHSA-cvxj-4745-843x · CVE-2022-43433 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:nunit Maven

CVSS 5.3 Medium

Jenkins NUnit Plugin vulnerable to Protection Mechanism Failure
- Information disclosure
- CWE-693
<0.28 · fixed in 0.28

GHSA-8cxw-wvhc-p4x4 · CVE-2022-43414 Not analysed yet 19 Oct 2022
com.compuware.jenkins:compuware-topaz-for-total-test Maven

CVSS 7.5 High

Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure
- Broken access control
- CWE-693
<=2.4.8 · no fixed version yet

GHSA-7fvj-g3wp-29g8 · CVE-2022-43429 Not analysed yet 19 Oct 2022
com.compuware.jenkins:compuware-scm-downloader Maven

CVSS 4.3 Medium

Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
- CWE-610
- CWE-693
<2.0.13 · fixed in 2.0.13

GHSA-682j-2p53-xp5f · CVE-2022-43423 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins.workflow:workflow-cps Maven

CVSS 9.9 CriticalCritical · CVSS 9+

Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
- CWE-693
<2803.v1a_f77ffcc773 · fixed in 2803.v1a_f77ffcc773

GHSA-mqc2-w9r8-mmxm · CVE-2022-43402 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:script-security Maven

CVSS 9.9 CriticalCritical · CVSS 9+

Jenkins Script Security Plugin sandbox bypass vulnerability
- CWE-693
<1184.v85d16b_d851b_3 · fixed in 1184.v85d16b_d851b_3

GHSA-f6mq-6fx5-w2ch · CVE-2022-43403 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:script-security +1 Maven

CVSS 8.8 High

Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
- CWE-693
<1184.v85d16b_d851b_3 · fixed in 1184.v85d16b_d851b_3

GHSA-7vr5-72w7-q6jc · CVE-2022-43401 Not analysed yet 19 Oct 2022
io.jenkins.plugins:pipeline-groovy-lib +1 Maven

CVSS 8.8 High

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
- CWE-693
<613.v9c41a_160233f · fixed in 613.v9c41a_160233f

GHSA-7qw2-h9gj-hcvh · CVE-2022-43406 Not analysed yet 19 Oct 2022
io.jenkins.plugins:pipeline-groovy-lib +1 Maven

CVSS 8.8 High

Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
- CWE-693
<613.v9c41a_160233f · fixed in 613.v9c41a_160233f

GHSA-4hjj-9gp7-4frg · CVE-2022-43405 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:script-security +1 Maven

CVSS 8.8 High

Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
- CWE-693
<1184.v85d16b_d851b_3 · fixed in 1184.v85d16b_d851b_3

GHSA-27rf-8mjp-r363 · CVE-2022-43404 Not analysed yet 19 Oct 2022
io.jenkins.plugins:neuvector-vulnerability-scanner Maven

CVSS 8.0 High

Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
- CWE-693
<1.22 · fixed in 1.22

GHSA-wmfh-h3vm-rcxm · CVE-2022-43434 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins:katalon Maven

CVSS 8.8 High

Jenkins Katalon Plugin vulnerable to Protection Mechanism Failure
- Code injection
- CWE-693
<1.0.33 · fixed in 1.0.33

GHSA-q6f6-6c4p-xph4 · CVE-2022-43416 Not analysed yet 19 Oct 2022
org.jenkins-ci.plugins.plugin:fireline Maven

CVSS 8.0 High

Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin
- CWE-693
<=1.7.2 · no fixed version yet

GHSA-7rrj-hqv6-fvpp · CVE-2022-43435 Not analysed yet 19 Oct 2022
com.compuware.jenkins:compuware-topaz-utilities Maven

CVSS 4.3 Medium

Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin
- CWE-693
<1.0.9 · fixed in 1.0.9

GHSA-2x49-wj38-78q9 · CVE-2022-43422 Not analysed yet 19 Oct 2022
CVE-2022-21626 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- CWE-693
Not analysed yet 18 Oct 2022
CVE-2022-39011 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 14 Oct 2022
CVE-2022-20464 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Android
- Android
- CWE-693
Not analysed yet 14 Oct 2022
isolated-vm npm

CVSS 9.7 CriticalCritical · CVSS 9+

isolated-vm has vulnerable CachedDataOptions in API
- Authentication bypass
- CWE-20
<4.3.7 · fixed in 4.3.7

GHSA-2jjq-x548-rhpv · CVE-2022-39266 Not analysed yet 30 Sept 2022
CVE-2022-3056 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 26 Sept 2022
CVE-2022-3044 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 26 Sept 2022
CVE-2022-32845 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Protection mechanism failure in Apple macOS and others
- Apple macOS
- Apple watchOS
- CWE-693
Not analysed yet 23 Sept 2022
org.jenkins-ci.plugins:wildfly-deployer Maven

CVSS 6.5 Medium

Jenkins WildFly Deployer Plugin vulnerable to path traversal
- Path traversal
- Broken access control
<=1.0.2 · no fixed version yet

GHSA-f7fq-wp2x-jc25 · CVE-2022-41235 Not analysed yet 22 Sept 2022
CVE-2022-32802 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS and others
- Apple macOS
- Apple tvOS
- CWE-693
Not analysed yet 20 Sept 2022
CVE-2022-26696 CVE record

CVSS 8.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 20 Sept 2022
CVE-2021-33081 CVE record

CVSS 7.9 High

Protection mechanism failure in Intel(R) SSD DC
- Intel(R) SSD DC
- CWE-693
Not analysed yet 20 Sept 2022
CVE-2021-33079 CVE record

CVSS 4.1 Medium

Protection mechanism failure in Intel(R) SSD DC
- Intel(R) SSD DC
- CWE-693
Not analysed yet 20 Sept 2022
CVE-2022-39957 CVE record

CVSS 7.3 High

Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header
- OWASP ModSecurity Core Rule Set
- CWE-693
Not analysed yet 20 Sept 2022
github.com/open-policy-agent/opa Go

CVSS 7.4 High

Protection bypass in github.com/open-policy-agent/opa
- CWE-20
- CWE-693
>=0.40.0, <0.44.0 · fixed in 0.44.0

GHSA-f524-rf33-2jjr · CVE-2022-36085 Not analysed yet 13 Sept 2022
CVE-2022-35978 CVE record

CVSS 7.7 High

Lua sandbox escape from mod in Minetest
- minetest
- CWE-693
Not analysed yet 15 Aug 2022
CVE-2022-33631 CVE record

CVSS 7.3 High

Microsoft Excel Security Feature Bypass Vulnerability
- Microsoft Office 2019
- Microsoft 365 Apps for Enterprise
- CWE-693
Not analysed yet 9 Aug 2022
com.compuware.jenkins:compuware-zadviser-api Maven

CVSS 4.3 Medium

Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
- CWE-693
<1.0.4 · fixed in 1.0.4

GHSA-5xp2-7qfc-fwgc · CVE-2022-36900 Not analysed yet 28 Jul 2022
com.compuware.jenkins:compuware-ispw-operations Maven

CVSS 4.3 Medium

Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin
- CWE-693
<1.0.9 · fixed in 1.0.9

GHSA-57f2-52wj-7vj6 · CVE-2022-36899 Not analysed yet 28 Jul 2022
org.jenkins-ci.main:jenkins-core Maven

CVSS 7.5 High

Unauthorized view fragment access in Jenkins
- Broken access control
- CWE-693
>=2.335, <2.356 · fixed in 2.356

GHSA-p3rc-946h-8cf5 · CVE-2022-34175 Not analysed yet 24 Jun 2022
org.jenkins-ci.plugins:xunit Maven

CVSS 6.5 Medium

Agent-to-controller security bypass in Jenkins xUnit Plugin
- CWE-693
<3.1.0 · fixed in 3.1.0

GHSA-298j-9q4w-6rm4 · CVE-2022-34181 Not analysed yet 24 Jun 2022
CVE-2022-31479 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Remote Code Execution via command injection of the hostname
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- CWE-693
Not analysed yet 6 Jun 2022
CVE-2022-26774 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple iTunes for Windows
- Apple iTunes for Windows
- CWE-693
Not analysed yet 26 May 2022
org.jenkins-ci.plugins:workflow-remote-loader Maven

CVSS 9.9 CriticalCritical · CVSS 9+

Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin
- CWE-183
- CWE-693
<1.5 · fixed in 1.5

GHSA-v558-fhw2-v46w · CVE-2019-10328 Not analysed yet 24 May 2022
org.jenkins-ci.plugins:gitea Maven

CVSS 7.5 High

Improper handling of untrusted branches in Gitea Jenkins Plugin
- Broken access control
- CWE-693
<1.1.2 · fixed in 1.1.2

GHSA-q98c-rqx7-7ghf · CVE-2019-10330 Not analysed yet 24 May 2022
org.jenkins-ci.plugins:squashtm-publisher-plugin Maven

CVSS 8.1 High

Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
- CWE-693
<=1.0.0 · no fixed version yet

GHSA-h648-gj34-5x4r · CVE-2021-43578 Not analysed yet 24 May 2022
org.jenkins-ci.main:jenkins-core Maven

CVSS 9.0 CriticalCritical · CVSS 9+

Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
- Path traversal
- CWE-693
<2.303.3 || >=2.304, <2.319 · fixed in 2.303.3, 2.319

GHSA-97c3-w9cr-6qc2 · CVE-2021-21690 Not analysed yet 24 May 2022
org.jenkins-ci.main:jenkins-core Maven

CVSS 8.8 High

Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin
- CWE-693
<2.303.3 || >=2.304, <2.319 · fixed in 2.303.3, 2.319

GHSA-c5r9-rx53-q3gf · CVE-2021-21696 Not analysed yet 24 May 2022
org.jenkins-ci.plugins:saml Maven

CVSS 8.8 High

Jenkins SAML Plugin allows bypassing CSRF protection for any URL
- Cross-site request forgery (CSRF)
- CWE-693
<2.0.8 · fixed in 2.0.8

GHSA-r5w3-pfq8-3r82 · CVE-2021-21678 Not analysed yet 24 May 2022