CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- bmc patrol agentAn issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the...7.8 High
- bmc patrol agentAn issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the...7.8 High
- google androidIn the default privileges of NFC, there is a possible local bypass of user interaction...7.8 High
- google androidIn startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch...7.8 High
- kaseya vsaAn issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration,...6.7 Medium
- vernissage project vernissageThe Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.8.8 High
- teardrop project teardropThe Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.8.8 High
- pont project pontThe Pont theme 1.5 for WordPress has insufficient restrictions on option updates.8.8 High
- simpolio project simpolioThe Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.8.8 High
- nixos nixNix through 2.3 allows local users to gain access to an arbitrary user's account because the...7.8 High
- kramerav viawareKramer VIAware 2.5.0719.1034 has Incorrect Access Control.9.8 Critical
- netaddr project netaddrnetaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions9.8 Critical
- pcprotect antivirusPC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak...7.8 High
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permission5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2...3.3 Low
- linux kernelieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux...3.3 Low
- linux kernelatalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel...3.3 Low
- linux kernelllcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through...3.3 Low
- corsair linkThe "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by...7.8 High
- cisco ios, ios xe software 3.2.11asg +1 moreCisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability6.7 Medium
- linux-nfs nfs-utils, suse linux enterprise server 12, linux enterprise server 15 +2 morenfs-utils: root-owned files stored in insecure /var/lib/nfs directory5.1 Medium
- google chromeInsufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a...6.5 Medium
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreSome of Dahua's Debug functions do not have permission separation. Low-privileged users can use...8.8 High
- beegoIncorrect Default Permissions in Beego5.5 Medium
- beegoBeego has a file creation race condition4.7 Medium
- atlassian jira, jira server +1 moreThe /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers...5.3 Medium
- humanica humatrixThe Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated...7.5 High
- limesurveyIn Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.2.7 Low
- limesurveyIn Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries...7.2 High
- limesurveyIn Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.7.2 High
- mozilla firefox, firefox esr, opensuse leap +2 moreIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Medium
- wtfutil wtfWTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for...5.5 Medium
- google chromeInsufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed...4.3 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode...7.1 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated...7.5 High
- exacq enterprise system manager, exacq technologies, inc. exacqvision enterprise system manager (esm) +1 moreexacqVision Enterprise System Manager (ESM) privilege escalation6.7 Medium
- gnome gvfsdaemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x...7.8 High
- log4js-node, log4js project log4js, debian linux +2 moreIncorrect Default Permissions in log4js-node5.5 Medium
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...9.8 Critical
- schneider-electric somachine basic, modicon m221 firmware +1 moreAn Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions,...5.5 Medium
- samba, fedoraproject fedora, synology directory server +4 more +6 moreA vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...6.1 Medium
- microsoft windows, windows server, windows 7 +1 more +3 moreAn elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default...5.9 Medium
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM)...6.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM...6.5 Medium
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- ibm bladecenter hs23 firmware, bladecenter hs23e firmware, flex system x220 m4 firmware +24 more +26 moreMissing System x Flash Memory Write Protection Lock Bit4.9 Medium
- corsair utility engineThe CorsairService Service in Corsair Utility Engine is installed with insecure default...7.8 High
- martem telem-gw6/gwm, telem-gw6 firmware, telem-gwm firmware +2 moreMartem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify...8.8 High
- [unknown] sos-collector, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that sos-collector does not properly set the default permissions of newly...5.9 Medium
- philips e-alert unit (non-medical device), e-alert firmware +1 morePhilips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon...7.5 High
- Show moreLoading…