Home/CWE/Improper Authorization
Weakness

Improper Authorization

CWE-285 · Class · Draft

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-284 · Improper Access Control
Children (more specific)
ParentOfCWE-1230 · Exposure of Sensitive Information Through Metadata
ParentOfCWE-1256 · Improper Restriction of Software Interfaces to Hardware Features
ParentOfCWE-1297 · Unprotected Confidential Information on Device is Accessible by OSAT Vendors
ParentOfCWE-1328 · Security Version Number Mutable to Older Versions
ParentOfCWE-552 · Files or Directories Accessible to External Parties
ParentOfCWE-732 · Incorrect Permission Assignment for Critical Resource
ParentOfCWE-862 · Missing Authorization
ParentOfCWE-863 · Incorrect Authorization
ParentOfCWE-926 · Improper Export of Android Application Components
ParentOfCWE-927 · Use of Implicit Intent for Sensitive Communication
◆

Attack Patterns (CAPEC)

17
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-1Accessing Functionality Not Properly Constrained by ACLs
CAPEC-104Cross Zone Scripting
CAPEC-127Directory Indexing
CAPEC-13Subverting Environment Variable Values
CAPEC-17Using Malicious Files
CAPEC-39Manipulating Opaque Client-based Data Tokens
CAPEC-402Bypassing ATA Password Security
CAPEC-45Buffer Overflow via Symbolic Links
CAPEC-5Blue Boxing
CAPEC-51Poison Web Service Registry
CAPEC-59Session Credential Falsification through Prediction
CAPEC-60Reusing Session IDs (aka Session Replay)
CAPEC-647Collect Data from Registries
CAPEC-668Key Negotiation of Bluetooth Attack (KNOB)
CAPEC-76Manipulating Web Input to File System Calls
CAPEC-77Manipulating User-Controlled Variables
CAPEC-87Forceful Browsing
⚠

CVEs With This Weakness

1,251
A sample of the 1,251 CVEs tagged with this weakness.
CVECVE-2026-8786
CVECVE-2026-8747
CVECVE-2026-8743
CVECVE-2026-8241
CVECVE-2026-8196
CVECVE-2026-8027
CVECVE-2026-7782
CVECVE-2026-7713
CVECVE-2026-7709
CVECVE-2026-7702
CVECVE-2026-7681
CVECVE-2026-7644
◉

Nuclei Scanner Templates

15
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalNext.js Middleware Authorization Bypass
criticalBonita Web 2021.2 - Authentication/Authorization Bypass
criticalThemeGrill Demo Importer < 1.6.2 - Database Reset
criticalQNAP HBS 3 - Broken Access Control
criticalKubeOperator Foreground `kubeconfig` - File Download
criticalModoboa < 2.1.0 - Improper Authorization
highApache Zeppelin - Unauthenticated Access
highApache NiFi - Unauthenticated Access
highXWiki REST API - Private Pages Disclosure
highXWiki REST API - Attachments Disclosure
highCasdoor - Authorization Bypass
highOptinMonster Plugin < 2.6.5 - Unprotected REST-API
highXWiki < 4.10.15 - Information Disclosure
highAvid NEXIS Agent - Arbitrary File Read
mediumCisco RV110W RV130W RV215W Router - Information leakage
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin