Falhas do tipo CWE-494

210 resultados

Elevação de privilégio

A aplicação não valida corretamente permissões ou contexto de segurança, permitindo que um usuário com privilégios baixos execute ações reservadas a administradores ou usuários com acesso mais elevado. É perigoso porque quebra o modelo de controle de acesso e expõe funcionalidades críticas.

Exemplo

Um usuário comum consegue acessar a API de administração porque o servidor valida apenas a presença de um token válido, ignorando o campo de 'role' contido nele; ou um programa SUID não revoga permissões root antes de executar código fornecido pelo usuário, permitindo leitura de arquivos sensíveis.

Como mitigar

Implemente verificação rigorosa de permissões em toda ação sensível (autorização não apenas autenticação), use listas de controle de acesso (ACL) explícitas, aplique princípio do menor privilégio e audite chamadas privilegiadas. Teste com usuários em papéis baixos para confirmar bloqueios.

CVE-2023-28818MEDIUMAn issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that couEPSS 0.2%CVE-2026-20056MEDIUMCisco Secure Web Appliance TBD Bypass VulnerabilityEPSS 0.2%CVE-2024-28850HIGHWP Crontrol possible RCE when combined with a pre-conditionEPSS 0.2%CVE-2026-62654HIGHA vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key EPSS 0.2%CVE-2024-47192MEDIUMAn issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files thEPSS 0.2%CVE-2026-42575HIGHapko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible)EPSS 0.2%CVE-2026-55981CRITICALFirmware verification vulnerabilityEPSS 0.2%CVE-2026-22865HIGHGradle's failure to disable repositories failing to answer can expose builds to malicious artifactsEPSS 0.2%CVE-2026-29797HIGHRed Lion Controls N-Tron 700 Series Download of Code Without Integrity CheckEPSS 0.2%CVE-2026-93649HIGHIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (EPSS 0.2%CVE-2024-48974CRITICALLife2000 Ventilator does not perform proper file integrity checks when adopting firmware updatesEPSS 0.2%CVE-2024-33660MEDIUMPotential Firmware update without integrity checkEPSS 0.1%CVE-2026-108160HIGHAstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP FeedEPSS 0.1%CVE-2026-121750LOWnvm install --offline installs a cached tarball that previously failed checksum verificationEPSS 0.1%CVE-2024-54126HIGHInsufficient Integrity Verification Vulnerability in TP-Link Archer C50EPSS 0.1%CVE-2025-15575MEDIUMMissing Firmware Authenticity Checks in Solax Power Pocket WiFi modelsEPSS 0.1%CVE-2026-84664MEDIUMJenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowinEPSS 0.1%CVE-2026-84666MEDIUMJenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration thEPSS 0.1%CVE-2026-105137LOWLaradock Build Process Dockerfile code downloadEPSS 0.1%CVE-2026-55251MEDIUMNetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules FilesEPSS 0.1%