CWE-267 Privilege Defined With Unsafe Actions
Description
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-267 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-qxpc-96fq-wwmg | CVE-2026-27314 | HIGH |
Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator |
2026-04-08 | |
| GHSA-5c4f-pxmx-xcm4 | CVE-2025-26467 | HIGH |
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) |
2025-08-25 | |
| GHSA-wmcc-9vch-jmx4 | CVE-2025-23015 | HIGH |
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions |
2025-02-18 | |
| GHSA-p976-h52c-26p6 | CVE-2023-22647 | CRITICAL |
Rancher vulnerable to Privilege Escalation via manipulation of Secrets |
2024-09-16 | |
| GHSA-9c24-43p5-fv82 | CVE-2019-10169 | HIGH |
Keycloak code execution via UMA policy abuse |
2024-04-23 | |
| GHSA-m4mv-rmr7-h5f5 | CVE-2023-2983 | MODERATE | - |
Pimcore Privilege Defined With Unsafe Actions vulnerability |
2023-06-06 |
| GHSA-7m27-3587-83xf | CVE-2019-10170 | HIGH |
Privilege Defined With Unsafe Actions in Keycloak |
2021-10-20 |