Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVEs (8,874)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-48239 1Nextcloud 1Nextcloud Server Jun 17, 2026 Nov 21, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in version 20.0.0 and pri...Show more Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in version 20.0.0 and prior to versions 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Enterprise Server, a malicious user could update any personal or global external storage, making them inaccessible for everyone else as well. Nextcloud Server 25.0.13, 26.0.8, and 27.1.3 and Nextcloud Enterprise Server is upgraded to 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 contain a patch for this issue. As a workaround, disable app files_external. This workaround also makes the external storage inaccessible but retains the configurations until a patched version has been deployed.Show less
CVE-2023-26347 1Adobe 1Coldfusion Jun 17, 2026 Nov 17, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage...Show more Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.Show less
CVE-2023-44292 1Dell 1Repository Manager Jun 17, 2026 Nov 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining es...Show more Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining escalated privileges. Show less
CVE-2023-44282 1Dell 1Repository Manager Jun 17, 2026 Nov 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining es...Show more Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining escalated privileges. Show less
CVE-2023-39259 1Dell 1Os Recovery Tool Jun 17, 2026 Nov 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading t...Show more Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system. Show less
CVE-2023-31100 1Phoenixtech 1Securecore Technology Jun 17, 2026 Nov 15, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4....Show more Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.217 * from 4.5.0.0 before 4.5.0.138Show less
CVE-2023-41570 1Mikrotik 1Routeros Jun 17, 2026 Nov 14, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.
CVE-2023-39228 1Intel 1Unison Software Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2023-39221 1Intel 1Unison Software Jun 17, 2026 Nov 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.
CVE-2023-38411 1Intel 1Smart Campus Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-33872 1Intel 1Support Jun 17, 2026 Nov 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2023-32279 1Intel 1Connectivity Performance Suite Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthenticated user to potentially enable information disclosure via network access.
CVE-2023-32204 1Intel 1One Boot Flash Update Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-29157 1Intel 1One Boot Flash Update Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-28397 1Intel 1Aptio V Uefi Firmware Integrator Tools Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via local access.
CVE-2023-27879 1Intel 4Optane Memory H20 With Solid State Storage Firmware Optane Ssd 905p FirmwareOptane Ssd Dc P4800x Firmware+1 more Jun 17, 2026 Nov 14, 2023 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVE-2023-22448 1Intel 1Unison Software Jun 17, 2026 Nov 14, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access.
CVE-2023-22285 1Intel 1Unison Software Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2022-41689 1Intel 1In Band Manageability Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in some Intel In-Band Manageability software before version 3.0.14 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-41659 1Intel 1Unison Jun 17, 2026 Nov 14, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.

Previous 1...334335336...444 Next