CWE-275: Permission Issues
Weaknesses in this category are related to improper assignment or handling of permissions.
From the CWE List. © The MITRE Corporation.
Newest
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore...4.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit...4.3 Medium
- huawei document security managementThe permission control module in Huawei Document Security Management (aka DSM) before...4.3 Medium
- softaculous whmcs reseller moduleThe WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the...9.9 Critical
- dell recoverpoint for virtual machines, emc recoverpoint +1 moreEMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions...4.4 Medium
- ibm corporation access manager, ibm security access manager 9.0 firmware, security access manager for mobile 8.0 firmware +2 more +4 moreIBM Security Access Manager for Web could allow an authenticated user to gain access to highly...6.5 Medium
- ibm integration bus, websphere message broker +1 moreIBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that...3.3 Low
- emc avamar data store, avamar virtual edition +1 moreEMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a...6.7 Medium
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the...5.5 Medium
- bluestacks app player, bluestacks +1 moreA local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App...8.4 High
- ibm qradar security information and event managerIBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for...3.3 Low
- google androidAn elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4, 5...5.5 Medium
- google androidAn elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x...5.5 Medium
- nvidia gpu driverFor the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a...7.8 High
- foxitsoftware readerFoxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier...7.8 High
- google androidOn Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver...7.5 High
- gnu guile, fedoraproject fedora +1 moreThe mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time...5.3 Medium
- irssi buf.plThe buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer...3.3 Low