CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- zte zxhn hs562 firmwareA smart camera product of ZTE is impacted by a permission and access control vulnerability. Due...7.2 High
- intel ipmctlIncorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows...7.8 High
- intel ssd data center toolIncorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreIncorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before...7.8 High
- intel ac 9461 firmware, ac 9462 firmware, ac 9560 firmware +2 more +4 moreInsecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an...7.3 High
- arena guild wars 2The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges...7.8 High
- opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 moreinn: %post calls user owned file allowing local privilege escalation to root6.8 Medium
- autodesk licensing servicesAutodesk Licensing Services was found to be vulnerable to privilege escalation issues. A limited...7.8 High
- adobe coldfusionThe Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default...7.8 High
- 8x8 jitsi meetjitsi-meet-prosody in Jitsi Meet before 5026 does not ensure that restrict_room_creation is set...7.5 High
- hyperkitty project hyperkitty, debian linux +1 moreExposure of sensitive information to an unauthorized actor in HyperKitty7.5 High
- vfairsvFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference...4.3 Medium
- acronis true image 2020An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe...7.8 High
- acronis true image 2020An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps...5.5 Medium
- zephyrproject zephyrSecurity problem with settings and littlefs3.3 Low
- nagios xiCreation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows...9.8 Critical
- nagios fusion, xi +1 moreIncorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier...8.8 High
- zte axon 11 5g firmwareA mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper...7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions4.3 Medium
- zzcmsInsecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.7.5 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreAn incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall...7.3 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreAn incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home...7.3 High
- opensuse factoryvirtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group7.8 High
- centreon webInsecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote...6.5 Medium
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as root3.3 Low
- honor pcmanagerA denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252...5.5 Medium
- soyal 701server, 701clientsql, 701serversql +2 moreSoyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability...8.8 High
- ibm spectrum protect for virtual environments, spectrum protect backup-archive client +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their...7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other te…7.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…7.3 High
- aviatrix openvpnArbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs...7.5 High
- aviatrix controllerInsecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and...7.5 High
- forescout counteractAn issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation...7.8 High
- razer synapseMultiple system services installed alongside the Razer Synapse 3 software suite perform...5.5 Medium
- razer synapseMultiple system services installed alongside the Razer Synapse 3 software suite perform...5.5 Medium
- lenovo power management driver for windows 10, power management driver +1 moreA privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to...5.5 Medium
- google androidIn getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable...5.5 Medium
- openclinic ga project gaAn incorrect default permissions vulnerability exists in the installation functionality of...8.8 High
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration...9.3 Critical
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default...9.3 Critical
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID...9.3 Critical
- samsung accountUsing unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below,...5.5 Medium
- google android, samsung mobile devices +1 moreAn improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP...4.0 Medium
- google android, samsung mobile devices +1 moreA vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1...4.0 Medium
- google exposure notifications verification serverPrivilege escalation in RBAC system6.3 Medium
- netop vision proIncorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9...9.8 Critical
- samsung notesUsing unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers...5.5 Medium
- huawei manageoneThere is an improper permission assignment vulnerability in Huawei ManageOne product. Due to...7.2 High
- otrs faq, otrs +1 moreFAQ articles are shown to users without permission3.5 Low
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.1 Medium
- Show moreLoading…