CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- devolutions remote desktop managerAn incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16...8.8 High
- rconfigInsecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig...8.8 High
- gitlabPermissions rules were not applied while issues were moved between projects of the same group in...2.6 Low
- confluent cp-ansibleInsecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local...5.5 Medium
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.9.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.9.8 Critical
- sonicwall global vpn clientSonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file...7.8 High
- apple ipados, macos, tvos +4 more +6 moreCopied files may not have the expected file permissions. This issue is fixed in Security Update...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and...5.5 Medium
- apple macosThe issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreDescription: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious…5.5 Medium
- apple macos, tvos, watchos +2 moreDescription: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privac…5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreA permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read se…3.3 Low
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be unable to fully delete browsing history.4.3 Medium
- raspapraspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.8.8 High
- xerosecurity sn1perIn XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application...8.8 High
- xerosecurity sn1perIn XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during...9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated...5.3 Medium
- gestionaleamica amica prodigyA vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's...7.8 High
- cohesity linux agentA permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b...7.8 High
- huawei harmonyosA component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit...5.5 Medium
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreAn incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One,...7.8 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Fails to Properly Check User Permissions4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions6.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP does not properly check user permission4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Don't Check Permissions of Pages4.3 Medium
- swisslog-healthcare hmi-3 control panel firmwareAn insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus...9.8 Critical
- dell emc powerscale onefs, isilon onefs, emc isilon onefs +2 moreThe Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0...8.8 High
- dell emc isilon onefs, emc powerscale onefs, powerscale onefs +2 moreDell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported...6.3 Medium
- dell emc powerstore, powerstore +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A...4.1 Medium
- acronis true imageAcronis True Image through 2021 on macOS allows local privilege escalation from admin to root due...6.7 Medium
- solarwinds dameware mini remote controlIn SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow...9.1 Critical
- nextcloud server, kiteworks security-advisories +1 moreDefault share permissions not respected for federated reshares3.5 Low
- hms-networks ecatcherIn HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to...6.1 Medium
- ninjarmmThe Agent in NinjaRMM 5.0.909 has Insecure Permissions.7.1 High
- google androidIn isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing...5.5 Medium
- google androidIn onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts...7.8 High
- google androidIn sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a...4.4 Medium
- google androidIn processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a...5.5 Medium
- google androidIn onPackageAddedInternal of PermissionManagerService.java, there is possible access to external...7.8 High
- google androidIn onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI...7.3 High
- huawei emui, magic ui +1 moreThere is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful...5.3 Medium
- huawei emui, magic ui +1 moreThere is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful...7.5 High
- huawei harmonyosThere is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful...8.4 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of...4.0 Medium
- zte zxv10 b860h v5.0 firmwareA smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to...7.5 High
- nvidia jetson linux, jetson tx1 +1 moreTrusty TLK contains a vulnerability in its access permission settings where it does not properly...3.9 Low
- nvidia jetson linux, jetson tx1 +1 moreThe ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access...6.3 Medium
- intel brand verification toolImproper permissions in the installer for the Intel(R) Brand Verification Tool before version 11...7.8 High
- Show moreLoading…