CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- nokia one-network directory serverNokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation.7.8 High
- suse rancherRancher Webhook is misconfigured during upgrade process9.9 Critical
- powerjobPowerJob vulnerable to Insecure Permissions5.3 Medium
- openrisc mor1kx firmwareAn issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write...7.8 High
- juniper junos os evolvedJunos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root7.8 High
- dualspace lock masterAn issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of...7.1 High
- filereplicationpro file replication proDiasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a...9.8 Critical
- tigergraph enterprise, cloud +1 moreAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication...8.8 High
- dell trusted device agent, trusted device client +1 moreDell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation...7.0 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A...7.8 High
- teacms project teacmsAn unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate...7.2 High
- coredial sipxcomCoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has...8.8 High
- fluentd, fluentd fluentd-ui +1 moreFluent Fluentd and Fluent-ui use default password8.8 High
- nvidia vgpu software (guest driver - windows), vgpu software (guest driver - linux), vgpu software (virtual gpu manager - citrix hypervisor, vmware vsphere, red hat enterprise linux kvm), nvidia cloud gaming (guest driver - windows), nvidia cloud gaming (guest driver - linux), nvidia cloud gaming (virtual gpu manager - red hat enterprise linux kvm), virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer...7.1 High
- huawei emui, harmonyos +1 moreThe facial recognition module has a vulnerability in file permission control. Successful...7.5 High
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deployment5.5 Medium
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deployment5.5 Medium
- ciliumcilium-agent container can access the host via `hostPath` mount4.4 Medium
- ibm manage applicationIBM Manage Application security bypass5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8,...5.4 Medium
- google chromeInappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64...4.3 Medium
- moodleMoodle has Incorrect Default Permissions5.3 Medium
- moodleMoodle has Incorrect Default Permissions5.3 Medium
- zbt we1626 firmwareAn Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local...6.0 Medium
- hitachi automation director, infrastructure analytics advisor, ops center analyzer +2 more +4 moreFile and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center6.6 Medium
- hitachi ops center analyzerDirectory Permission Vulnerability in Hitachi Ops Center Analyzer7.3 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition improper access control6.3 Medium
- ttyd project ttydAn issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration...9.8 Critical
- lizhifaka project lizhifakaPermissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary...8.8 High
- intel quickassist technologyIncorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux...7.3 High
- intel xeon d-1513n firmware, xeon d-1518 firmware, xeon d-1520 firmware +133 more +135 moreIncorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R)...7.2 High
- intel oneapi-cliInsecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0...7.5 High
- synopsys jenkins coverity plugin, jenkins synopsys coverity +1 moreSynopsys Jenkins Coverity Plugin has Incorrect Default Permissions4.3 Medium
- synopsys jenkins coverity plugin, jenkins synopsys coverity +1 moreCSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials4.3 Medium
- splunk, splunk enterprise, cloud platform +2 more‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise4.3 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissions. The following products are...2.2 Low
- samsung galaxy storeImproper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing permission check. This could lead to local...5.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A...7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low...6.3 Medium
- hp support assistantPotential security vulnerabilities have been identified in HP Support Assistant. These...7.8 High
- hp support assistantPotential security vulnerabilities have been identified in HP Support Assistant. These...7.8 High
- softperfect networxSoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with...8.8 High
- askey rtf3505vw-n1 firmwareAn issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate...7.8 High
- lenovo bios, ideapad y700-14isk firmware +1 moreA potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK...6.7 Medium
- lenovo bios, d330-10igl firmware, ideapad 5 pro 16arh7 firmware +42 more +44 moreA potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...6.7 Medium
- lenovo leyunAn incorrect default permissions vulnerability in Lenovo Leyun cloud music application could...5.5 Medium
- cisco cx cloud agentA vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to...6.7 Medium
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint...8.1 High
- Show moreLoading…