CWE-250 带着不必要的权限执行 类弱点 300 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-250指程序以高于实际所需的最小权限级别执行操作。这种过度授权不仅可能直接引发权限提升漏洞，还会放大其他安全缺陷的后果。攻击者常利用此弱点，通过触发特定功能获取更高系统控制权，从而执行恶意代码或窃取敏感数据。开发者应遵循最小权限原则，在代码中严格限制进程权限，确保仅授予完成任务所必需的最低特权，从而降低潜在安全风险。
def makeNewUserDir(username): if invalidUsername(username): #avoid CWE-22 and CWE-78 print('Usernames cannot contain invalid characters') return False try: raisePrivileges() os.mkdir('/home/' + username) lowerPrivileges() except OSError: print('Unable to create new user directory for user:' + username) return False return Truechroot(APP_HOME); chdir("/"); FILE* data = fopen(argv[1], "r+"); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0120 | Palo Alto Networks GlobalProtect 安全漏洞 — GlobalProtect App | 7.0AI | High AI | 2025-04-11 |
| CVE-2025-23009 | SonicWALL NetExtender Windows client 安全漏洞 — NetExtender | 7.1AI | High AI | 2025-04-10 |
| CVE-2025-23008 | SonicWALL NetExtender Windows client 安全漏洞 — NetExtender | 8.1AI | High AI | 2025-04-10 |
| CVE-2025-3364 | HGiga PowerStation 安全漏洞 — PowerStation | 6.7 | Medium | 2025-04-08 |
| CVE-2025-0416 | Valmet DNA 安全漏洞 — Valmet DNA | 8.9 | High | 2025-04-01 |
| CVE-2024-11821 | dify 安全漏洞 — langgenius/dify | 5.7 | - | 2025-03-20 |
| CVE-2024-48013 | Dell SmartFabric OS10 安全漏洞 — SmartFabric OS10 Software | 8.8 | High | 2025-03-17 |
| CVE-2024-2240 | Broadcom SANnav 安全漏洞 — Brocade SANnav | 8.8 | - | 2025-02-14 |
| CVE-2024-7102 | GitLab Enterprise Edition和GitLab Community Edition 安全漏洞 — GitLab | 9.6 | Critical | 2025-02-13 |
| CVE-2024-8266 | GitLab Enterprise Edition和GitLab Community Edition 安全漏洞 — GitLab | 4.4 | Medium | 2025-02-13 |
| CVE-2024-12673 | Lenovo Vantage 安全漏洞 — Vantage | 7.8 | High | 2025-02-12 |
| CVE-2024-21924 | AMD System Management Mode 安全漏洞 — AMD EPYC™ 7002 Processors | 8.2 | High | 2025-02-11 |
| CVE-2025-22890 | Humming Heads Defense Platform 安全漏洞 — Defense Platform Home Edition | 7.8 | - | 2025-02-06 |
| CVE-2024-49814 | IBM Security Verify Access 安全漏洞 — Security Verify Access Appliance | 7.8 | High | 2025-02-06 |
| CVE-2025-20185 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email | 3.4 | Low | 2025-02-05 |
| CVE-2023-37412 | IBM Aspera Faspex 安全漏洞 — Aspera Faspex | 4.4 | Medium | 2025-01-29 |
| CVE-2025-24814 | Apache Solr 安全漏洞 — Apache Solr | 9.8 | - | 2025-01-27 |
| CVE-2024-47978 | Dell NativeEdge 安全漏洞 — NativeEdge | 7.8 | High | 2024-12-25 |
| CVE-2024-35141 | IBM Security Verify Access Docker 安全漏洞 — Security Verify Access Docker | 7.8 | High | 2024-12-19 |
| CVE-2024-31891 | IBM Storage Scale 安全漏洞 — Storage Scale | 7.8 | High | 2024-12-14 |
| CVE-2024-28140 | Image Access Scan2Net 安全漏洞 — Scan2Net | 9.8 | - | 2024-12-11 |
| CVE-2024-28139 | Image Access Scan2Net 安全漏洞 — Scan2Net | 7.8 | - | 2024-12-11 |
| CVE-2024-49804 | IBM Security Verify Access 安全漏洞 — Security Verify Access | 7.8 | High | 2024-11-29 |
| CVE-2021-38118 | OpenText iManager 安全漏洞 — iManager | 5.5 | Medium | 2024-11-22 |
| CVE-2024-52799 | Argo Workflows 安全漏洞 — argo-helm | 8.3 | High | 2024-11-21 |
| CVE-2024-11075 | SICK Incoming Goods Suite 安全漏洞 — SICK Incoming Goods Suite | 8.8 | High | 2024-11-19 |
| CVE-2020-26074 | Cisco?SD-WAN vManage 授权问题漏洞 — Cisco Catalyst SD-WAN Manager | 7.8 | High | 2024-11-18 |
| CVE-2024-8781 | TR7 Application Security Platform 安全漏洞 — Application Security Platform (ASP) | 7.8AI | High AI | 2024-11-18 |
| CVE-2024-51722 | BlackBerry SecuSUITE 安全漏洞 — SecuSUITE | 6.4 | Medium | 2024-11-12 |
| CVE-2024-48837 | Dell SmartFabric OS10 安全漏洞 — SmartFabric OS10 Software | 7.8 | High | 2024-11-12 |
CWE-250（带着不必要的权限执行） 是常见的弱点类别，本平台收录该类弱点关联的 300 条 CVE 漏洞。