CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- logicaldocA local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5...9.3 Critical
- kia head unit firmwareKia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1...7.8 High
- google androidIn listen() and related functions of TelephonyRegistry.java, there is a possible permissions...5.5 Medium
- google androidIn sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of...3.3 Low
- google androidIn createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a...7.8 High
- audacityteam audacity, fedoraproject fedora +1 moreAudacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After...3.3 Low
- beckhoff twincat xar 3.1, twincat extended automation runtime +1 moreBeckhoff: Privilege Escalation through TwinCat System7.3 High
- gitlab, gitlab ce/ee +1 moreInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker...6.5 Medium
- intel driver \& support assistantIncorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an...5.5 Medium
- intel board id toolIncorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an...7.8 High
- intel battery life diagnostic toolImproper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before...7.8 High
- intel high definition audio driverImproper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561...7.8 High
- intel realsense d400 series dynamic calibration toolIncorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool...7.8 High
- intel active management technology software development kitIncorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0...7.8 High
- ivanti endpoint managerSeveral services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with...7.8 High
- sap erp client for e-bilanz, sap se erp client for e-bilanz 1.0 +1 moreSAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem...4.4 Medium
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...5.3 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API4.9 Medium
- moxa, moxa mxview +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- moxa, moxa mxview +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +14 more +16 moreu'An Unaligned address or size can propagate to the database due to improper page permissions and...7.8 High
- pax prolinosAn attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161...6.8 Medium
- netgear nighthawk r7000 firmwareThe SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote...6.5 Medium
- google androidIn updateNotification of BeamTransferManager.java, there is a possible permission bypass due to...5.5 Medium
- google androidIn getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a...5.5 Medium
- google androidIn generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due...7.8 High
- google androidIn CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a...5.5 Medium
- vanderbilt redcapAn issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature (that...4.3 Medium
- apple macos, mac os x +1 moreA lock screen issue allowed access to contacts on a locked device. This issue was addressed with...2.4 Low
- verifone mx900 firmwareVerifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with...6.7 Medium
- strapiImproper Authorization in Strapi7.5 High
- ghisler total commanderAn issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions...7.3 High
- google androidIn various locations in SystemUI, there is a possible permission bypass due to an unsafe...5.5 Medium
- google androidIn AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non...6.5 Medium
- google androidIn setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check....3.3 Low
- google androidIn setNotification of SapServer.java, there is a possible permission bypass due to a...5.5 Medium
- actfaxActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation...7.3 High
- nakivo backup \& replication directorInsecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel...5.5 Medium
- google androidIn Telephony, there is a missing permission check. This could lead to local information...5.5 Medium
- google androidIn Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could...5.5 Medium
- google androidIn Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead...5.5 Medium
- google androidIn the wallpaper manager, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn Telephony, there is a possible permission bypass due to a missing permission check. This could...5.5 Medium
- google androidIn Telephony, there is a possible permission bypass due to a missing permission check. This could...5.5 Medium
- Show moreLoading…