Vulnerabilities > Incorrect Authorization

DATE CVE VULNERABILITY TITLE RISK
2022-05-30 CVE-2022-1589 Incorrect Authorization vulnerability in Change Wp-Admin Login Project Change Wp-Admin Login
The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings.
network
low complexity
change-wp-admin-login-project CWE-863
7.5
2022-05-26 CVE-2022-26767 Incorrect Authorization vulnerability in Apple Macos
The issue was addressed with additional permissions checks.
local
low complexity
apple CWE-863
5.5
2022-05-23 CVE-2022-30016 Incorrect Authorization vulnerability in Rescue Dispatch Management System Project Rescue Dispatch Management System 1.0
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
8.8
2022-05-19 CVE-2022-22978 Incorrect Authorization vulnerability in multiple products
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers.
network
low complexity
vmware oracle netapp CWE-863
critical
9.8
2022-05-18 CVE-2021-3956 Incorrect Authorization vulnerability in Lenovo Xclarity Controller
A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory.
network
low complexity
lenovo CWE-863
5.3
2022-05-17 CVE-2022-1706 Incorrect Authorization vulnerability in multiple products
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products.
network
low complexity
redhat fedoraproject CWE-863
6.5
2022-05-17 CVE-2022-1753 Incorrect Authorization vulnerability in Wowonder
A vulnerability, which was classified as critical, was found in WoWonder.
network
low complexity
wowonder CWE-863
4.3
2022-05-16 CVE-2022-0574 Incorrect Authorization vulnerability in Publify Project Publify
Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
network
low complexity
publify-project CWE-863
6.5
2022-05-16 CVE-2022-1553 Incorrect Authorization vulnerability in Publify Project Publify
Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8.
network
low complexity
publify-project CWE-863
4.9
2022-05-13 CVE-2022-29854 Incorrect Authorization vulnerability in Mitel Minet Firmware 1.8.0.12
A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup.
low complexity
mitel CWE-863
6.8