CWE-269 特权管理不恰当 类弱点 1470 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-269 属于权限管理不当漏洞，指产品未能正确分配、修改、跟踪或检查用户权限，导致攻击者获得非预期的控制范围。攻击者常利用此缺陷提升权限或越权访问敏感资源。开发者应实施最小权限原则，严格验证每次操作的身份与权限，确保权限分配、变更及撤销过程的安全性与完整性，从而防止未授权访问。
def makeNewUserDir(username): if invalidUsername(username): #avoid CWE-22 and CWE-78 print('Usernames cannot contain invalid characters') return False try: raisePrivileges() os.mkdir('/home/' + username) lowerPrivileges() except OSError: print('Unable to create new user directory for user:' + username) return False return Trueseteuid(0); /* do some stuff */ seteuid(getuid());| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-24072 | Naver Whale Browser 安全漏洞 — NAVER Whale browser | 6.1 | - | 2022-03-17 |
| CVE-2022-24750 | UltraVNC 安全漏洞 — UltraVNC | 8.8 | High | 2022-03-10 |
| CVE-2022-24931 | Samsung ApkInstaller 安全漏洞 — Samsung Mobile Devices | 7.9 | High | 2022-03-08 |
| CVE-2022-24408 | Siemens SINUMERIK 安全漏洞 — SINUMERIK MC | 7.8 | - | 2022-03-08 |
| CVE-2022-25311 | Siemens SINEC NMS 安全漏洞 — SINEC NMS | 7.3 | High | 2022-03-08 |
| CVE-2022-0441 | WordPress plugin MasterStudy LMS 安全漏洞 — MasterStudy LMS – WordPress LMS Plugin | 9.8 | - | 2022-03-07 |
| CVE-2022-23921 | GE Proficy CIMPLICITY-IPM 安全漏洞 — Proficy CIMPLICITY | 7.5 | High | 2022-02-25 |
| CVE-2022-23604 | x26-Cogs 安全漏洞 — x26-Cogs | 8.8 | High | 2022-02-15 |
| CVE-2021-22801 | Schneider Electric ConneXium Network Manager Software 安全漏洞 — ConneXium Network Manager Software (All Versions) | 9.8 | - | 2022-02-11 |
| CVE-2022-24927 | Samsung Video Player 安全漏洞 — Samsung Video Player | 4.2 | Medium | 2022-02-11 |
| CVE-2021-36302 | Dell EMC Integrated System 安全漏洞 — Dell EMC Integrated System for Microsoft Azure Stack Hub | 9.9 | Critical | 2022-02-09 |
| CVE-2021-3813 | chatwoot 安全漏洞 — chatwoot/chatwoot | 8.1 | - | 2022-02-09 |
| CVE-2021-45729 | WordPress plugin 安全漏洞 — WP Google Map (WordPress plugin) | 5.4 | Medium | 2022-01-25 |
| CVE-2021-43860 | Flatpak 安全漏洞 — flatpak | 8.2 | High | 2022-01-12 |
| CVE-2022-0144 | shelljs 安全漏洞 — shelljs/shelljs | 7.8 | - | 2022-01-11 |
| CVE-2022-22263 | Samsung SMR Jan-2022 Release 1 安全漏洞 — Samsung Mobile Devices | 4.0 | Medium | 2022-01-07 |
| CVE-2022-22266 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 4.0 | Medium | 2022-01-07 |
| CVE-2021-31833 | Mcafee McAfee Application and Change Control 安全漏洞 — McAfee Application and Change Control (MACC) | 7.1 | High | 2022-01-04 |
| CVE-2021-43858 | Minio MinIO 安全漏洞 — minio | 8.8 | High | 2021-12-27 |
| CVE-2021-27445 | MesaLabs AmegaView 授权问题漏洞 — AmegaView | 7.8 | High | 2021-12-21 |
| CVE-2021-36316 | DELL Dell EMC Avamar Server 安全漏洞 — Avamar | 6.7 | Medium | 2021-12-21 |
| CVE-2021-43835 | SULU Sulu 安全漏洞 — sulu | 7.2 | High | 2021-12-15 |
| CVE-2021-43828 | PatrOwl 安全漏洞 — PatrowlManager | 7.5 | High | 2021-12-14 |
| CVE-2021-37941 | GE APM 安全漏洞 — APM Java Agent | 7.8 | - | 2021-12-08 |
| CVE-2021-25515 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 4.0 | Medium | 2021-12-08 |
| CVE-2021-25513 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 2.4 | Low | 2021-12-08 |
| CVE-2021-43793 | Discourse 安全漏洞 — discourse | 4.3 | Medium | 2021-12-01 |
| CVE-2021-36307 | Dell Networking OS10 安全漏洞 — Networking OS | 8.8 | High | 2021-11-20 |
| CVE-2021-37938 | Elastic Stack Kibana 路径遍历漏洞 — Kibana | 7.1 | - | 2021-11-18 |
| CVE-2021-25508 | Samsung SmartThings 安全漏洞 — SmartThings | 5.3 | Medium | 2021-11-05 |
CWE-269（特权管理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 1470 条 CVE 漏洞。