Falhas do tipo CWE-653

75 resultados

Falha de isolamento entre funcionalidades com privilégios diferentes

O software não separa adequadamente funcionalidades, processos ou recursos que exigem níveis distintos de privilégio ou permissão. Isso permite que código ou usuários com permissões baixas acessem ou executem operações que deveriam estar restritas, comprometendo o controle de acesso da aplicação.

Exemplo

Um painel administrativo que carrega componentes sensíveis (gestão de usuários, logs de auditoria) na mesma sessão de código que funcionalidades públicas, sem validar permissões em cada operação. Um usuário comum descobre um endpoint /admin/delete-user que não verifica se ele tem privilégio de admin, apenas se está autenticado.

Como mitigar

Implemente validação de permissões em todas as operações sensíveis, não apenas na camada de roteamento. Use padrões como role-based access control (RBAC) ou attribute-based access control (ABAC), e isolate componentes críticos em processos ou containers separados com permissões mínimas necessárias.

CVE-2024-57720MEDIUMlunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.EPSS 0.3%CVE-2024-57723MEDIUMlunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.EPSS 0.3%CVE-2024-0137MEDIUMNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted codeEPSS 0.3%CVE-2025-26393MEDIUMSolarWinds Service Desk Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-46215MEDIUMAn Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 throuEPSS 0.3%CVE-2025-12695MEDIUMInsecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandboxEPSS 0.3%CVE-2026-8401CRITICALSandbox escape in the Profile Backup componentEPSS 0.3%CVE-2023-29580MEDIUMyasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.EPSS 0.3%CVE-2026-57135HIGHPraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsEPSS 0.3%CVE-2026-65635HIGHBoruta dynamic client registration allows creation of over-privileged OAuth clientsEPSS 0.3%CVE-2025-34201HIGHVasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker InstancesEPSS 0.3%CVE-2026-34775MEDIUMElectron: nodeIntegrationInWorker not correctly scoped in shared renderer processesEPSS 0.3%CVE-2024-30388HIGHJunos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flapsEPSS 0.3%CVE-2025-53710HIGHNetwork boundaries not respected in certain Foundry namespaces.EPSS 0.3%CVE-2026-62246HIGHKamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolationEPSS 0.3%CVE-2025-41116LOWIncorrect oauth passthrough in Grafana Databricks DatasourceEPSS 0.3%CVE-2025-3717LOWIncorrect oauth passthrough in Grafana Snowflake DatasourceEPSS 0.3%CVE-2026-5600MEDIUMA new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-EPSS 0.3%CVE-2026-41174MEDIUMTraefik Kubernetes CRD allows unauthorized cross-namespace middleware bindingEPSS 0.3%CVE-2024-5801MEDIUMIP Forwarding enabled in B&R Automation RuntimeEPSS 0.3%