Common Weakness Enumeration

CWE-274 Improper Handling of Insufficient Privileges

Description

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-274 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-78cg-fc6c-w44w CVE-2026-33005 MODERATE
maven/org.apache.openmeetings/openmeetings-parent

Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability

 2026-04-10
GHSA-9x4q-3gxw-849f CVE-2024-41942 HIGH
pypi/jupyterhub

JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

 2025-01-21
GHSA-xh35-w7wg-95v3 CVE-2024-21648 HIGH
maven/org.xwiki.platform/xwiki-platform maven/org.xwiki.platform/xwiki-platform-oldcore

XWiki has no right protection on rollback action

 2024-01-09
GHSA-j8x2-2m5w-j939 CVE-2022-23511 HIGH
golang/github.com/aws/amazon-cloudwatch-agent

Amazon CloudWatch Agent for Windows has Privilege Escalation Vector

 2023-04-03