地图 / Incorrect AuthorizationIncorrect Authorization
Incorrect Authorization · 访问控制
访问控制 / Incorrect Authorization
13公开报告
—CWE 编号
0已标注发现方式
13关联报告
发现方式分布
暂无发现方式标注。
关联报告
Full access to internal Gitlab instances at redash.gitlab.com, dashboards.gitlab.com, prometheus.gitlab.comGitLab · 2019-04-19 · 高危 · 306 票inDriver Job - Admin Approval BypassinDrive · 2023-07-05 · 低危 · $1,000 · 157 票IDOR Leads To User Profile Modification https://mtnmobad.mtnbusiness.com.ng/app/updateUserMTN Group · 2024-09-18 · 高危 · 96 票A user can bypass approval step in Hacker Publishing feature, allowing them to publish reports immediatelyHackerOne · 2018-12-05 · 低危 · $2,500 · 90 票CVE-2026-3784: wrong proxy connection reuse with credentialscurl · 2026-03-11 · 低危 · 30 票Incorrect Authorization leads to see other users Documents UploadedTennessee Valley Authority · 2023-11-30 · 低危 · 29 票A user can request a report to be retested even though the program has not been verified by HackerOneHackerOne · 2018-12-27 · 低危 · 27 票Connection reuse ignores haproxyprotocol and HAPROXY_CLIENT_IP settings, allowing PROXY context to persist across transferscurl · 2026-05-19 · 低危 · 22 票OTP bypass - Unintended disclosure of OTP to client allows attacker to manage users' subscriptionsMTN Group · 2020-04-11 · 低危 · 19 票libcurl Digest/NTLM authentication ignores an explicit Authorization headercurl · 2026-08-25 · 低危 · 14 票oauth misconfigration lead to account takeoverReddit · 2023-05-18 · 未评级 · 11 票Email verification bypasaStripo Inc · 2020-03-24 · 中危 · 5 票Incorrect Authorization Checks in /include/findusers.phpImpressCMS · 2022-03-22 · 低危 · 4 票