Advisories · Weakness
CWE-842.
Every Advisory and CVE whose sources give the weakness CWE-842, newest first.
- CVSS 4.3 Medium
Moodle: group validation missing when enrolling user to course
- CWE-842
- CVSS 7.7 High
Security Advisory 0164
- Arista Networks EOS
- CWE-842
- CVSS 7.3 High
authd: Primary group ID is incorrectly set to value of UID
- CWE-842
>=0.6.0, <0.6.4 · fixed in 0.6.4
GHSA-fg3j-5w9g-hmg7 · CVE-2026-6970 - CVSS 8.7 High
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
- Weak cryptography or TLS
- CWE-305
<6.24.2 · fixed in 6.24.2
GHSA-fpm5-2wcj-vfr7 · CVE-2024-10082 - CVSS 8.4 High
Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager
- Rockwell Automation Verve® Asset Manager
- CWE-842
- CVSS 8.6 High
Unauthorised granting of administrator privileges over arbitrary teams under certain circumstances
- elabftw
- Privilege escalation
- CWE-842
- CVSS 7.7 High
api-platform/core's secured properties may be accessible within collections
- Broken access control
- CWE-842
>=2.6.0, <2.7.10 || >=3.0.0, <3.0.12 || >=3.1.0, <3.1.3 · fixed in 2.7.10, 3.0.12, 3.1.3
GHSA-vr2x-7687-h6qv · CVE-2023-25575 - CVSS 6.3 Medium
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.
- Dell PowerScale OneFS
- CWE-842
-
A privilege escalation flaw was found in Ceph.
- Ceph
- CWE-842
- CVSS 7.1 High
Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification
- Broken access control
- CWE-842
<1.27.1 · fixed in 1.27.1
GHSA-fjm8-m7m6-2fjp · CVE-2022-2990 - CVSS 7.1 High
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
- Broken access control
- CWE-842
<3.0.1 · fixed in 3.0.1
GHSA-4wjj-jwc9-2x96 · CVE-2022-2989 - CVSS 4.9 Medium
Privilege escalation from administrator in eLabFTW
- elabftw
- CWE-842
- CWE-1287