CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- sylabs singularitySingularity insecure permissions7.5 High
- apple ios, iphone os +1 moreA permissions issue existed in which execute permission was incorrectly granted. This issue was...5.5 Medium
- tibco spotfire analyst, spotfire analytics platform for aws, spotfire deployment kit +3 more +5 moreTIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files7.6 High
- ivanti workspace controlIn Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges...7.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin missing permission check5.4 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreMissing permission check in Jenkins Build Failure Analyzer Plugin4.3 Medium
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreMissing permission check in Jenkins Gerrit Trigger Plugin5.4 Medium
- contaoInformation disclosure in the Contao backend5.3 Medium
- atlassian application linksThe ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1...4.3 Medium
- intel dynamic platform and thermal frameworkImproper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and...7.8 High
- intel rapid storage technologyImproper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an...7.8 High
- intel setup and configuration software platform discovery utilityImproper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all...7.8 High
- intel quartus primeImproper permissions in the installer for the License Server software for Intel? Quartus? Prime...7.8 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...5.3 Medium
- saltosystem proaccess spaceAn issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a...5.5 Medium
- djangoproject django, fedoraproject fedora +1 moreDjango allows unintended model editing6.5 Medium
- litemanagerLiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server"...7.3 High
- cloudera data science workbenchAn issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2....8.3 High
- cloudera cdhCloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15...7.2 High
- ibm spectrum protect backup-archive client, spectrum protect for virtual environments, spectrum protect +2 moreIBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1...5.1 Medium
- python keyringIncorrect Default Permissions in keyring6.2 Medium
- vtiger crmIn Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without...8.8 High
- zohocorp manageengine opmanager, manageengine firewall analyzer +1 moreIncorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager...7.8 High
- redhat tuned, debian linux, fedoraproject fedora +4 more +6 moretuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill...5.5 Medium
- intel proset\/wireless wifiImproper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may...7.1 High
- intel nuvoton consumer infraredImproper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before...7.8 High
- moodle, fedoraproject fedora +1 moreMoodle default permissions too permissive4.3 Medium
- scanguard antivirusScanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory,...7.8 High
- edgewall trac, debian linux +1 moreTrac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be...7.5 High
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreMishandling of file-system uid/gid with namespaces in shiftfs6.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files...5.1 Medium
- ldap-git-backup, debian linux, ldap git backup project git backup +2 moreldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.5.5 Medium
- cisco firepower management center, firepower services software for asa, secure firewall management center +1 more +3 moreCisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability5.8 Medium
- symantec sonar, sonar component +1 moreThe Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass...6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View...5.3 Medium
- python keyring, python keyring lib keyring lib, debian linux +2 moreIncorrect Default Permissions in keyring7.5 High
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...6.5 Medium
- jenkins global post script, jenkins project global post script plugin +1 moreJenkins Global Post Script Plugin missing permission check4.3 Medium
- jenkins libvirt slaves, jenkins project libvirt slaves plugin +1 moreJenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration4.3 Medium
- jenkins libvirt slaves, jenkins project libvirt slaves plugin +1 moreJenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions6.5 Medium
- jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreJenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration6.5 Medium
- jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreJenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization6.5 Medium
- jenkins deploy weblogic, jenkins project deploy weblogic plugin +1 moreJenkins Deploy WebLogic Plugin missing permission check4.3 Medium
- jenkins dynatrace application monitoring, jenkins project dynatrace application monitoring plugin +1 moreJenkins Dynatrace Plugin contains Incorrect Default Permissions6.5 Medium
- mozilla firefoxA compromised content process could send a message to the parent process that would cause the ...6.5 Medium
- linuxfoundation harbor, vmware cloud foundation, harbor container registry +2 moreHarbor API has a Broken Access Control vulnerability. The vulnerability allows project...7.5 High
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability4.4 Medium
- ubisoft uplayUbisoft Uplay 92.0.0.6280 has Insecure Permissions.7.8 High
- Show moreLoading…