CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- systemd project systemd, debian linux +1 moreThe SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change...5.9 Medium
- apache commons fileuploadIncorrect Default Permissions in Apache Commons FileUpload3.3 Low
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePuppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.5.5 Medium
- adobe coldfusionadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass...9.8 Critical
- redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +2 moreGrinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions3.3 Low
- dracut project dracut, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moredracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...2.1 Low
- moodleMoodle Incorrect Default Settings5.5 Medium
- mediawiki, debian linux +1 moreMediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests,...5.0 Medium
- google chromeGoogle Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has...6.8 Medium
- google chromeThe drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly...4.3 Medium
- google chromeGoogle Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions,...5.0 Medium
- dracut project dracut, udev project udev +1 moreplymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak...4.0 Medium
- cpanelUnspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to...9.0 High
- silvercity project silvercitySilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3)...7.8 High
- skypeSkype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype...4.6 Medium
- microsoft windows media playerMicrosoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with...7.8 High
- mandrakesoft mandrake linuxThe Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home...5.5 Medium
- apache tomcatApache Tomcat may be started without proper security settings7.5 High
- isc binddnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure...7.8 High
- suse linuxThe default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.9.8 Critical