Weaknesses of type CWE-92

34 results

Verificação inadequada de condições

Ocorre quando o código não valida corretamente as condições necessárias antes de executar uma operação crítica. O programa assume estados ou premissas sem checar se elas são verdadeiras, permitindo que fluxos não intencionais sejam executados ou protegidas sejam contornadas.

Example

Um aplicativo web que verifica se o usuário é admin comparando apenas um parâmetro GET (ex: ?admin=1) sem validar a sessão real do usuário. Um atacante pode forjar a requisição e contornar a proteção porque a condição não foi adequadamente verificada.

How to mitigate

Sempre validar explicitamente todas as premissas antes de operações sensíveis — use testes de condição robustos, não confie em valores que vêm do cliente, e implemente verificações redundantes em pontos críticos (autenticação, autorização, transações).

CVE-2024-21808LOWImproper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-32656MEDIUMImproper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autEPSS 0.2%CVE-2024-34170MEDIUMImproper buffer restrictions in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via lEPSS 0.2%CVE-2023-33867MEDIUMImproper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autEPSS 0.2%CVE-2024-23919MEDIUMImproper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilegEPSS 0.2%CVE-2022-27879MEDIUMImproper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable informationEPSS 0.2%CVE-2023-24589MEDIUMImproper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potenEPSS 0.2%CVE-2024-24580MEDIUMImproper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enabEPSS 0.2%CVE-2022-36372HIGHImproper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege viEPSS 0.2%CVE-2023-27506MEDIUMImproper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potEPSS 0.2%CVE-2023-43753MEDIUMImproper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information discloEPSS 0.2%CVE-2023-42429HIGHImproper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lEPSS 0.2%CVE-2023-28722MEDIUMImproper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalaEPSS 0.1%CVE-2024-25562MEDIUMImproper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potenEPSS 0.1%