CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi jp1/performance management - agent option for application server, jp1/performance management - agent option for domino, jp1/performance management - agent option for enterprise applications +23 more +25 moreFile and Directory Permission Vulnerability in JP1/Performance Management8.4 High
- acronis cyber protect 15, cyber protect +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...3.3 Low
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: plaintext password in operator log5.5 Medium
- redhat single sign-on, red hat single sign-on 7, rhel-8 based middleware containers +4 more +6 moreRhsso-container-image: unsecured management interface exposed to adjecent network8.0 High
- opensecurity mobile security frameworkWithdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions7.5 High
- jenkinsJenkins temporary plugin file created with insecure permissions8.8 High
- acronis cyber protect home office, true image oem +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- mitsubishi electric melsoft fielddeviceconfigurator, melsoft iq appportal, mx sheet +23 more +25 moreMalicious Code Execution Vulnerability in FA Engineering Software Products9.3 Critical
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-276524.8 Medium
- adobe connectPrivilage Escalation in Saphira Connect8.8 High
- wftpserver wing ftp server, wing ftp server ftp server +1 moreInsecure Default Permissions in Wing FTP Server <= 7.2.06.1 Medium
- inosoft visiwin 7An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The...7.8 High
- tsplus remote workAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control...9.8 Critical
- tsplus remote accessAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA permissions issue was addressed with improved redaction of sensitive information. This issue is...5.3 Medium
- thalesgroup safenet authentication service, thales safenet authtentication service agent +1 moreImproper securing of log directory may allow a denial of service5.7 Medium
- dell powerscale onefsDell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low...5.3 Medium
- intel realsense software development kitIncorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 0.25.0 may allow an...6.7 Medium
- intel intelligent test systemIncorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow...6.7 Medium
- topconpositioning mavinci desktop, mavinci desktop software for intel falcon 8 plus desktop software for intel falcon 8 plus +1 moreIncorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before...6.7 Medium
- intel server debug and provisioning toolIncorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may...6.7 Medium
- intel supportIncorrect default permissions in the Intel(R) Support android application before version v23.02...4.4 Medium
- intel advanced link analyzerIncorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software...6.7 Medium
- google andrioid, android +1 moreIn restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an...7.8 High
- arm compiler, compiler for embedded fusa, compiler for functional safety +4 more +6 moreIncomplete verification of installation file signature7.8 High
- arm compiler, compiler for embedded fusa, compiler for functional safety +9 more +11 moreInsecure directory permissions on installer files7.8 High
- teleadapt roomcast ta-2400, roomcast ta-2400 firmware +1 moreTeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from...9.8 Critical
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,...7.8 High
- abb ability™ zenon, zenon +1 moreCode Execution through overwriting project file on zenon engineering studio system5.9 Medium
- ateraAtera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure...7.8 High
- omnis studioOmnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis...5.3 Medium
- omnis studioOmnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for...6.5 Medium
- steelseries ggAn issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted...8.8 High
- hitachi compute systems manager, device manager, replication manager +2 more +4 moreFile and Directory Permission Vulnerability in Hitachi Command Suite6.6 Medium
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device...7.4 High
- opensuse tumbleweedIncorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users...7.8 High
- samsung android, samsung mobile devices +1 moreImproper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1...2.4 Low
- cisco anyconnect secure mobility client, secure client +1 moreA vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent...5.5 Medium
- hcl software bigfix webui insightsHCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization3.0 Low
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5,...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4,...7.8 High
- apple ipados, macos, watchos +2 more +4 moreThis issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and...5.5 Medium
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for...7.8 High
- hewlett packard enterprise (hpe) hpe mc990 x rmc firmware, hpe integrity mc990 x server rmc firmware, sgi uv 300 rmc firmware +2 moreThe MC990 X and UV300 RMC component has and inadequate default configuration that could be...7.8 High
- zte up t2 4k firmware, zxv10 b860h v5d0 firmware, zxv10 b866v2-h firmware +2 more +4 moreThere is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to...7.7 High
- fortinet forticlient, forticonverter, forticlientwindows +2 moreAn incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0...6.8 Medium
- easeus todo backupEaseUS Todo Backup may allow local privilege escalation8.8 High
- Show moreLoading…