CWE-842 · 10 records

Placement of User into Incorrect Group

CVEs in this class

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2022-31007Proof of concept	Privilege escalation from administrator in eLabFTWelabftw · elabftw · CWE-842	High7.2	—	26.9%	May 31, 2022
35Monitor	CVE-2022-45097No exploit	Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.dell · emc powerscale onefs · CWE-842	High8.8	—	0.4%	Feb 1, 2023
33Monitor	CVE-2024-9412No exploit	Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Managerrockwell automation · verve® asset manager · CWE-842	High8.4	—	0.4%	Oct 8, 2024
31Monitor	CVE-2022-3650No exploit	A privilege escalation flaw was found in Ceph.redhat · ceph · CWE-842 Local privilege escalation	High7.8	—	0.3%	Jan 17, 2023
30Monitor	CVE-2026-73439No exploit	Security Advisory 0164arista networks · eos · CWE-842	High7.7	—	0.3%	Sep 16, 2026
29Monitor	CVE-2026-6970No exploit	authd Denial of Service and Local Privilege Escalationcanonical · authd · CWE-842 Local privilege escalation	High7.3	—	0.1%	Apr 27, 2026
28Monitor	CVE-2022-2990No exploit	An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possbuildah project · buildah · CWE-842	High7.1	—	0.3%	Sep 13, 2022
28Monitor	CVE-2022-2989No exploit	An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possipodman project · podman · CWE-842	High7.1	—	0.3%	Sep 13, 2022
26Monitor	CVE-2023-25575No exploit	Secured properties in API Platform Core may be accessible within collectionsapi-platform · core · CWE-842	Medium6.5	—	0.6%	Feb 28, 2023
17Monitor	CVE-2026-102585No exploit	Moodle: group validation missing when enrolling user to coursemoodle · moodle · CWE-842	Medium4.3	—	0.2%	Sep 30, 2026

CVE-2022-31007
36Monitor
Privilege escalation from administrator in eLabFTW
HighCVSS 7.2Proof of conceptEPSS 26%
elabftw · elabftwMay 31, 2022
CVE-2022-45097
35Monitor
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.
HighCVSS 8.8No exploitEPSS 0%
dell · emc powerscale onefsFeb 1, 2023
CVE-2024-9412
33Monitor
Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager
HighCVSS 8.4No exploitEPSS 0%
rockwell automation · verve® asset managerOct 8, 2024
CVE-2022-3650
31Monitor
A privilege escalation flaw was found in Ceph.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
redhat · cephJan 17, 2023
CVE-2026-73439
30Monitor
Security Advisory 0164
HighCVSS 7.7No exploitEPSS 0%
arista networks · eosSep 16, 2026
CVE-2026-6970
29Monitor
authd Denial of Service and Local Privilege Escalation
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
canonical · authdApr 27, 2026
CVE-2022-2990
28Monitor
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or poss
HighCVSS 7.1No exploitEPSS 0%
buildah project · buildahSep 13, 2022
CVE-2022-2989
28Monitor
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possi
HighCVSS 7.1No exploitEPSS 0%
podman project · podmanSep 13, 2022
CVE-2023-25575
26Monitor
Secured properties in API Platform Core may be accessible within collections
MediumCVSS 6.5No exploitEPSS 0%
api-platform · coreFeb 28, 2023
CVE-2026-102585
17Monitor
Moodle: group validation missing when enrolling user to course
MediumCVSS 4.3No exploitEPSS 0%
moodle · moodleSep 30, 2026

All vulnerability classes