CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi tuning managerFile and Directory Permission Vulnerability in Hitachi Tuning Manager6.6 Medium
- axigen mail serverA 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by...9.8 Critical
- huawei emui, harmonyos +1 moreThe system has a vulnerability that may cause dynamic hiding and restoring of app icons...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 morermt-server-pubcloud allows to escalate from user _rmt to root7.8 High
- opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 moresaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls7.0 High
- jobe project jobetrampgeek jobe Restapi.php runs_post Privilege Escalation5.5 Medium
- google androidIn AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions...7.8 High
- illumos, oracle solaris +1 moreAn issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products....8.1 High
- apimanApiman has potential permissions bypass6.5 Medium
- openharmonyTelephony in communication subsystem sends public events with personal data, but the permission is not set.6.2 Medium
- rackn digital rebarRackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12,...8.8 High
- ivanti endpoint managerA privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that...9.8 Critical
- telosalliance omnia mpx node firmwareInsecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to...8.8 High
- d-link dvg-g5402sp firmwareAn access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to...9.8 Critical
- ni labview command line interfaceIncorrect default permissions in the installation folder for NI LabVIEW Command Line Interface ...7.8 High
- google androidIn deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass...7.8 High
- google androidIn getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission...5.5 Medium
- google androidIn getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to...7.8 High
- google androidIn test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets...7.8 High
- google androidIn readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System...7.8 High
- google androidIn sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location...2.3 Low
- hcl software sametimeHCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access6.5 Medium
- acer aspire a115-21, aspire a315-22, aspire a315-22g +7 more +9 moreAcer Aspire BIOS vulnerability8.1 High
- sourcegraphIncorrect default permissions found in Sourcegraph9.0 Critical
- hp omen gaming hub, omen gaming hub sdk +1 morePotential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which...9.8 Critical
- hp elite slice firmware, elite x2 1012 g1 firmware, elite x2 1012 g2 firmware +73 more +75 moreA potential vulnerability has been identified in the system BIOS for certain HP PC products which...8.4 High
- hp jumpstartA potential security vulnerability has been identified in the HP Jumpstart software, which might...7.8 High
- jenkins support core, jenkins project support core plugin +1 moreIncorrect permission checks in Jenkins Support Core Plugin6.5 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal4.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal5.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal5.3 Medium
- intel nuc kit wireless adapter driver installerIncorrect default permissions in the installer software for some Intel(r) NUC Kit Wireless...6.7 Medium
- intel supportIncorrect default permissions in the Intel(R) Support Android application before version v22.02...4.4 Medium
- huawei emui, harmonyos +1 moreThe preset launcher module has a permission verification vulnerability. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions...7.5 High
- huawei emui, harmonyos +1 moreThe power module has a vulnerability in permission verification. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThere is a vulnerability in permission verification during the Bluetooth pairing process....4.3 Medium
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 moreWeak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier,...9.8 Critical
- ibm robotic process automation, robotic process automation for cloud pak +1 more"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to...7.5 High
- hitachi infrastructure analytics advisor, ops center analyzer, ops center viewpoint +2 moreFile Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint6.6 Medium
- google androidIn dismiss and related functions of KeyguardHostViewController.java and related files, there is a...4.6 Medium
- google androidIn initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code...7.8 High
- Show moreLoading…