CWE-863

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStat

An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.ja

Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.

A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, th

Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to im

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell

Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.j

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier i

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and M

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass iss

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is

A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauth

Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allow

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java th

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other u

An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can lead to an access leve

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since app

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to acces

Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identi

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an int

Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token witho

An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers

An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integr

Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default conf

A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attac

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management perm

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on

In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authori

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil

A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could all

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attack

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for t

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Ser

Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol

The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0

BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance b

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.

IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST A