CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn Telephony, there is a possible permission bypass due to a missing permission check. This could...5.5 Medium
- google androidIn Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing...7.8 High
- google androidIn Bluetooth, there is a possible control over Bluetooth enabled state due to a missing...7.8 High
- google androidIn NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to...7.8 High
- google androidIn SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn NetworkStatsService, there is a possible access to protected data due to a missing permission...5.5 Medium
- google androidIn UsageStatsManager, there is a possible access to protected data due to a missing permission...5.5 Medium
- google androidIn Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This...5.5 Medium
- google androidIn Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This...5.5 Medium
- google androidIn devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn ADB server and USB server, there is a possible permission bypass due to an unsafe...5.5 Medium
- google androidIn Java network APIs, there is possible access to sensitive network state due to a missing...5.5 Medium
- google androidIn MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the...7.8 High
- drupal, drupal core +1 moreDrupal Core Access bypass vulnerability5.3 Medium
- lenovo system interface foundationA denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo...5.5 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.8 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.3 High
- thomsonreuters eikonThomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file...7.8 High
- gmapfpgmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can...7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default Permissions7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default Permissions7.5 High
- google androidIn the app zygote SE Policy, there is a possible permissions bypass. This could lead to local...5.5 Medium
- google androidIn createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible...7.8 High
- schneider-electric somoveIncorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause...7.8 High
- gigadevice gd32f130 firmwareGigadevice GD32F130 devices allow physical attackers to escalate their debug interface...6.8 Medium
- openzfsOpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user...7.8 High
- cisco connected mobile experiencesCisco Connected Mobile Experiences Privilege Escalation Vulnerability6.7 Medium
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability5.3 Medium
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability6.3 Medium
- ericssonlg ipecs, ericsson-lg ipces ucm +1 moreEricssonlg iPECS Privilege Escalation Vulnerability6.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +5 more +7 moreWindows Setup Elevation of Privilege Vulnerability7.3 High
- getcomposer composer-setup, composer windows-setup +1 moreLocal privilege elevation in Composer-Setup for Windows6.7 Medium
- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +73 more +75 moreInsecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8...7.8 High
- intel mailbox interface driverImproper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions,...7.8 High
- intel realsense d415 firmware, realsense d435 firmware, realsense d435i firmware +2 moreImproper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for...7.8 High
- intel distribution of openvino toolkitIncorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2...7.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article...6.5 Medium
- opensuse leap, leap 15.1, leap 15.2 +3 more +5 moreinn: non-root owned files8.4 High
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreAn insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows...7.2 High
- sick package analyticsSICK Package Analytics software up to and including version V04.0.0 are vulnerable due to...7.5 High
- osisoft pi api, pi buffer subsystem, pi connector +6 more +8 moreIn OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect...7.8 High
- linux kernel, xen, netapp cloud backup +2 more +4 moreAn issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote...4.3 Medium
- silverstripeSilverstripe has Incorrect Default Permissions5.3 Medium
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3...8.8 High
- nvidia jetpack software development kit, jetson agx xavier, tx1, tx2, and nano l4t +1 moreNVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not...8.1 High
- mozilla firefox, opensuse leap +1 moreWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Medium
- mozilla firefox, opensuse leap +1 moreWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 Medium
- Show moreLoading…