Browse / Access Control

Access Control

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Improper Access Control - Generic888
• Privilege Escalation464
• Improper Authorization55
• Client-Side Enforcement of Server-Side Security20
• Forced Browsing14
• Incorrect Authorization13
• Reliance on Untrusted Inputs in a Security Decision8
• Improper Privilege Management7
• Missing Authorization7
• Improper Handling of Insufficient Permissions or Privileges4
• Incorrect Permission Assignment for Critical Resource3
• Execution with Unnecessary Privileges3
• Improper Export of Android Application Components2
• Incorrect Privilege Assignment2
• Incorrect Default Permissions2
• Access Control Check Implemented After Asset is Accessed1
• Improper Preservation of Permissions1

Often found together with

• Information Disclosure209
• Misconfiguration200
• Authentication179
• Insecure Direct Object Reference104
• Cross-site Scripting72
• Code Execution70
• Cross-Site Request Forgery61

Most upvoted Access Control reports

AllValidInformativeN/ADuplicate

1. Connection reuse ignores haproxyprotocol and HAPROXY_CLIENT_IP settings, allowing PROXY context to persist across transfersN/AIncorrect Authorization · curl
   22 votes
2. HTTP Proxy Bypass via `CURLOPT_CUSTOMREQUEST` Verb TunnelingN/AImproper Access Control - Generic · high · curl
   21 votes
3. Mentioned unites are at the same time .Then we have to increase the bounty.N/AForced Browsing · curl
   17 votes
4. verify-release rebuilds from the tarball under verification, enabling pre-check command execution and false OK for a malicious curl release tarballN/AReliance on Untrusted Inputs in a Security Decision · medium · curl
   16 votes
5. HAProxy Connection Reuse leads to IP Spoofing and mTLS Context SmugglingN/AImproper Access Control - Generic · high · curl
   16 votes
6. Ability to monitor reports' submission in real timeN/APrivilege Escalation · HackerOne
   16 votes
7. No Rate Limit On Forgot Password PageN/AImproper Access Control - Generic · medium · Acronis
   13 votes
8. [Critical] Subdomain TakeoverN/APrivilege Escalation · Instacart
   13 votes
9. curl -OJ allows creating custom .curlrc file which allows exfiltrating private data, among other thingsN/AImproper Access Control - Generic · curl
   10 votes
10. [High] MITM via Insecure CA Path Handling in cURL (--capath, CURLOPT_CAPATH) (CWE-494: Download of Code Without Integrity Check)N/AReliance on Untrusted Inputs in a Security Decision · high · curl
    10 votes
11. setopt(VERIFYPEER) from callback bypasses TLS verify on connection reuseN/AImproper Access Control - Generic · low · curl
    7 votes
12. No Rate Limit (Leads to huge email flooding/email bombing)N/AImproper Access Control - Generic · medium · Aspen
    7 votes
13. Unauthorized Access - downgraded admin roles to none can still edit projects through brupsuiteN/AImproper Access Control - Generic · high · Omise
    6 votes
14. App Takeover ( makerdao.herokuapp.com )N/APrivilege Escalation · high · BlockDev Sp. Z o.o
    6 votes
15. Github wikis are editable by anyone #GithubwikistakeoverN/AImproper Access Control - Generic · low · curl
    6 votes
16. Broken Authendication And Session ManagementN/AImproper Access Control - Generic · Reddit
    5 votes
17. The mailbox verification API interface is unlimited and can be used as a mailbox bombN/AImproper Access Control - Generic · medium · Phabricator
    5 votes
18. MQTT: unsigned integer underflow bypasses MAX_MQTT_MESSAGE_SIZE checkN/AImproper Access Control - Generic · curl
    4 votes
19. error parse uri path in curlN/AImproper Access Control - Generic · high · curl
    4 votes
20. Broken Authentication and Session Management lead to take over accountN/AImproper Access Control - Generic · high · Phabricator
    4 votes
21. Bypass email verification when register new accountN/AImproper Access Control - Generic · Legal Robot
    4 votes
22. password reset email spammingN/AImproper Access Control - Generic · low · ownCloud
    4 votes
23. CVE-2020-6287 https://redapi2.acronis.comN/AImproper Access Control - Generic · critical · Acronis
    3 votes
24. Subdomains takeover of register.acronis.com, promo.acronis.com, info.acronis.com and promosandbox.acronis.comN/APrivilege Escalation · high · Acronis
    2 votes
25. Publicly editable GitHub wikisN/AImproper Access Control - Generic · high · Liberapay
    2 votes
26. ETHEREUM_PRIVATE_KEY leaked via githubN/AImproper Access Control - Generic · Sifchain
    1 votes
27. Privilege escalation to allow non activated users to login and use uber partner ios appN/APrivilege Escalation · Uber
    1 votes