CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- oneblog project oneblogOneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high...6.5 Medium
- mindskip xzs-mysqlxzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source...7.5 High
- hospital\'s patient records management system project patient records management systemSourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure...5.3 Medium
- opensuse factoryparsec: dangerous 777 permissions for /run/parsec5.9 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreMissing Authorization in snipe/snipe-it6.3 Medium
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install time8.2 High
- nikhil-bhalerao laundry booking management systemLaundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote...9.8 Critical
- huawei harmonyosThe cellular module has a vulnerability in permission management. Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Vulnerability of obtaining broadcast information improperly due to improper broadcast...7.5 High
- huawei harmonyosPackageManagerService has a Permissions, Privileges, and Access Controls vulnerability ...5.3 Medium
- avast antivirusSandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be...8.8 High
- advantech r-seenetA privilege escalation vulnerability exists in the Windows version of installation for Advantech...8.8 High
- advantech r-seenetA privilege escalation vulnerability exists in the Windows version of installation for Advantech...8.8 High
- advantech r-seenetA privilege escalation vulnerability exists in the Windows version of installation for Advantech...8.8 High
- automoxAutomox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.7.8 High
- automoxAutomox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this...7.8 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...7.5 High
- amazon aws opensearchThe CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.9.8 Critical
- dreamreport remote connectorA privilege escalation vulnerability exists in the Remote Server functionality of Dream Report...8.8 High
- barracuda network access clientBarracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with...7.8 High
- google androidIn TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN...7.8 High
- google androidIn TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check...6.8 Medium
- google androidIn isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of...5.5 Medium
- google androidIn SRAMROM, there is a possible permission bypass due to an insecure permission setting. This...6.7 Medium
- apache jspwikiArbitrary file deletion on logout9.1 Critical
- octopus tentacleWhen Octopus Tentacle is installed on a Linux operating system, the systemd service file...7.8 High
- huawei emui, magic ui +1 moreThere is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- intel thunderbolt non-dch driverImproper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all...7.8 High
- intel 7265 firmware, 9260 firmware, ac 3165 firmware +10 more +12 moreIncorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows...7.8 High
- intel vtune profilerIncorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler...7.8 High
- intel oneapi rendering toolkitIncorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before...7.8 High
- intel nuc hdmi firmware update toolIncorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update...7.8 High
- intel nuc m15 laptop kit hid event filter driver packIncorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event...7.8 High
- intel nuc m15 laptop kit integrated sensor hub driver packIncorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated...7.8 High
- lenovo legion phone pro (l79031), legion phone2 pro (l70081), legion phone2 pro \(l70081\) firmware +1 more +3 moreAn information disclosure vulnerability was reported in the Time Weather system widget on Legion...5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are...5.3 Medium
- kexec-tools project kexec-toolsA flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a...5.5 Medium
- redhat coreos-installercoreos-installer < 0.10.0 writes world-readable Ignition config to installed system5.5 Medium
- delta electronics dialinkDelta Electronics DIALink7.8 High
- google androidIn Browser app, there is a possible information disclosure due to a missing permission check....5.5 Medium
- bitdefender endpoint security tools for windows, endpoint security tools, total security +2 moreIncorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe7.8 High
- huawei emui, magic ui +1 moreThere is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful...9.8 Critical
- huawei emui, magic ui +1 moreThere is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this...9.8 Critical
- huawei emui, magic ui +1 moreThere is an Improper permission management vulnerability in Huawei Smartphone.Successful...5.3 Medium
- northern.tech cfengineThe Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local...5.5 Medium
- gestionaleopen gestionale openAn Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able...7.8 High
- google androidIn startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app...5.5 Medium
- trend micro apex oneAn incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a...7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine File Download Vulnerability4.3 Medium
- asus ux582lr firmwareASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow...6.8 Medium
- Show moreLoading…