Vulnerabilities > Incorrect Privilege Assignment

DATE CVE VULNERABILITY TITLE RISK
2022-04-04 CVE-2022-1225 Incorrect Privilege Assignment vulnerability in PHPipam
Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.
network
low complexity
phpipam CWE-266
6.5
2021-06-02 CVE-2020-35514 Incorrect Privilege Assignment vulnerability in Redhat Openshift
An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift.
local
high complexity
redhat CWE-266
7.0
2021-05-26 CVE-2020-10695 Incorrect Privilege Assignment vulnerability in Redhat Single Sign-On
An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container.
local
low complexity
redhat CWE-266
7.8
2021-03-24 CVE-2019-19354 Incorrect Privilege Assignment vulnerability in Redhat Openshift Container Platform 4.4
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4.
local
low complexity
redhat CWE-266
7.8
2021-03-24 CVE-2019-19353 Incorrect Privilege Assignment vulnerability in Redhat Openshift Container Platform 4.0
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4.
local
high complexity
redhat CWE-266
7.0
2021-03-24 CVE-2019-19352 Incorrect Privilege Assignment vulnerability in Redhat Openshift Container Platform 4.0
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4.
local
high complexity
redhat CWE-266
7.0
2021-03-24 CVE-2019-19350 Incorrect Privilege Assignment vulnerability in Redhat Openshift 3.11/4.0
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11.
local
low complexity
redhat CWE-266
7.8
2021-03-24 CVE-2019-19349 Incorrect Privilege Assignment vulnerability in Redhat Openshift 4.0
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4.
local
low complexity
redhat CWE-266
7.8
2021-02-17 CVE-2021-1416 Incorrect Privilege Assignment vulnerability in Cisco Identity Services Engine
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information.
network
low complexity
cisco CWE-266
4.3
2021-02-17 CVE-2021-1412 Incorrect Privilege Assignment vulnerability in Cisco Identity Services Engine
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information.
network
low complexity
cisco CWE-266
6.5