CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- go-vikunja vikunja Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database 6.8 Medium
- go-vikunja vikunja Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump 6.9 Medium
- hewlett packard enterprise (hpe) hpe cray programming environment In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE... 7.8 High
- i.r.i.s s.a. irispowerscan IRISPowerscan Insecure default privilege assignment for installation account 7.2 High
- avaya system manager CVE-2026-16305 7.8 High
- dell alienware command center (awcc) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default... 7.1 High
- No product listed Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27... 7.5 High
- gfi usa, llc kerioconnect GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation 8.5 High
-
strands-agentsPyPI Strands Agents: Default FileSessionManager storage is world-readable on shared systems 5.7 Medium - ministry of land, infrastructure, transport and tourism, japan electronic delivery item inspection support system Electronic delivery item Inspection Support System provided by Japan's Ministry of Land,... 8.5 High
- microsoft .net 10.0 installed on linux, .net 10.0 installed on mac os, .net 10.0 installed on windows +11 more +13 more ASP.NET Core Elevation of Privilege Vulnerability 7.8 High
- apple container If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host… 7.8 High
- watchguard agent WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering 7.3 High
- oracle corporation product lifecycle analytics Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component... 5.5 Medium
- progressive robot ltd hmailserver Incorrect Default Permissions in hMailServer 7.8 High
- apache software foundation camel Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions 5.5 Medium
- tsplus remote access Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation 5.4 Medium
- hyland desktop host Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This... 7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 more Windows Server Update Service Elevation of Privilege Vulnerability 7.5 High
- the-40-thieves obsidian-tc obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets 6.5 Medium
- samsung mobile flow Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to... 2.1 Low
- zte z80 ultra Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product 3.3 Low
- aws aws-toolkit-vscode Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code 6.8 Medium
- progressive robot ltd hmailserver Incorrect Default Permissions in hMailServer 7.8 High
- rapid7 velociraptor Velociraptor privilege escalation via SysmonLogForward client monitoring artifact 5.5 Medium
- froxlor Froxlor before 2.3.12 Authentication Bypass via EmailSender.add 7.1 High
- ibm concert Multiple Vulnerabilities in IBM Concert Software 6.2 Medium
- dell command | integration suite for system center Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect... 5.5 Medium
- dell command | intel vpro out of band Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default... 5.5 Medium
- watchdog anti-virus Incorrect Default Permissions in WatchDog Anti-Virus Installation Directory 5.9 Medium
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +1 more +3 more Local privilege escalation due to insecure file permissions. The following products are affected:... 7.8 High
- dell repository manager Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions... 8.5 High
- eclipse foundation ankaios In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control... 8.4 High
- lenovo filez client, filez enterprise +1 more A potential improper permissions vulnerability was reported in the Lenovo Filez Client... 8.5 High
- inductive automation ignition Inductive Automation Ignition Incorrect Default Permissions 8.7 High
- jal digital co.,ltd. pallet control, palletcontrol, palletcontrol cloud +2 more PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a... 8.5 High
- No product listed Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the... 8.8 High
- rockwell automation redundancy module configuration tool Redundancy Module Configuration Tool - Multiple Vulnerabilities 7.0 High
- rockwell automation redundancy module configuration tool Redundancy Module Configuration Tool - Multiple Vulnerabilities 7.0 High
- jahlives openssl encrypt openssl_encrypt before 1.4.9 Insecure File Permissions 8.6 High
- sky co., ltd. skymec it manager, skysea client view +1 more SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If... 8.5 High
- ransomlook Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook 7.0 High
- hclsoftware hcl hive HCL Hive is affected by incorrect default permissions 7.5 High
- kenwood dnr1007xr Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability 6.6 Medium
- dell command update, command update (dcu) +1 more Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions... 7.8 High
- d-link dir-842 D-Link DIR-842 vsftpd vsftpd.conf default permission 2.3 Low
- trendnet tew-813dru TRENDNET TEW-813DRU vsftpd vsftpd.conf default permission 2.3 Low
- lenovo dock manager During an internal security assessment, a potential improper permissions vulnerability was... 8.5 High
- hcl aion HCL AION is affected by multiple security vulnerabilities. 4.7 Medium
- progress whatsup gold WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. 6.8 Medium
- Show olderLoading…