CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- echa.europa iuclidEuropean Chemicals Agency IUCLID Desktop Installer iuclid6.exe default permission4.4 Medium
- intel nuc p14e laptop elementIncorrect default permissions in some Intel Integrated Sensor Hub (ISH) driver for Windows 10 for...6.7 Medium
- oracle graalvm, graalvm for jdk, jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...5.9 Medium
- datahub-project datahubDefault Privileges allow for high level operations for low privileged users in datahub7.5 High
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions...7.0 High
- hitachi tuning managerFile and Directory Permission Vulnerability in Hitachi Tuning Manager6.6 Medium
- relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y...5.5 Medium
- omron sysmac studio, automation software sysmac studio +1 moreExecutable files writable by low-privileged users in Omron Sysmac Studio5.5 Medium
- fit2cloud cloudexplorer liteInsecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local...7.8 High
- surrealdbSurrealDB before 1.0.1 Insecure Default Table Permissions8.7 High
- canonical ubuntu server, ubuntu linux +1 moreA feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows...5.0 Medium
- beyondtrust privilege management for macAn issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated,...8.8 High
- ncp-e secure enterprise clientInsecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow...6.5 Medium
- huawei emui, harmonyos +1 morePermission management vulnerability in the module for disabling Sound Booster. Successful...5.3 Medium
- huawei emui, harmonyos +1 morePermission management vulnerability in the PMS module. Successful exploitation of this...9.8 Critical
- softing opcSofting OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to...7.5 High
- google androidIn createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials...5.5 Medium
- google androidThere is elevation of privilege.9.8 Critical
- gl-inet gl-ax1800 firmwareInsecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker...9.8 Critical
- apache supersetApache Superset: Unnecessary read permissions within the Gamma role4.3 Medium
- cskaza cszcmsCSZCMS File Manager Page templates permission4.7 Medium
- dell powerprotect agent for file systemPowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default...4.0 Medium
- m-privacy mprivacy-tools, rsbac-policy-tgpro, tightgatevnc +2 moreIn mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11...8.8 High
- openatom openharmonyLiteos-A has a incorrect default permissions vulnerability6.2 Medium
- openatom openharmonyLiteos-A has a incorrect default permissions vulnerability7.3 High
- ibm infosphere information serverIBM InfoSphere Information Server privilege escalation8.1 High
- concretecms concrete cmsConcrete CMS allows unauthorized access because directories can be created with insecure permissions9.8 Critical
- autelrobotics evo nano drone firmwareInsecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows...6.5 Medium
- absolute software secure access, ivanti secure access client +1 moreWhen a particular process flow is initiated, an attacker may be able to gain unauthorized...7.8 High
- ivanti secure access clientA vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow...8.8 High
- intel arc a graphics, iris xe graphics +1 moreIncorrect default permissions in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows...6.7 Medium
- intel arc rgb controllerIncorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may...6.7 Medium
- debian linux, intel core i3-1005g1 firmware, core i3-10100y firmware +220 more +222 moreSequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may...8.8 High
- emudhra emsignerIncorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows...9.8 Critical
- xwiki application-collaboraThe same file cannot be opened with different rights7.4 High
- lenovo 1lenovo preload directory, preload directory +1 moreA privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using...7.3 High
- advanced export products orders cron csv excel project export products orders cron csv excelInsecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers...7.5 High
- ivanti avalancheIvanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability7.8 High
- lenovo thinkpad bios, thinkpad 25 firmware, thinkpad l560 firmware +11 more +13 moreA vulnerability due to improper write protection of UEFI variables was reported in the BIOS of...6.7 Medium
- tenable nessus network monitorPrivilege Escalation7.0 High
- ellipticlabs virtual lock sensor, lenovo elliptic labs virtual lock sensor, thinkpad t14 gen 3 +1 more +3 moreA vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that...7.8 High
- wenwen-ai wenwenai cmsInsecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate...8.0 High
- solarwinds access rights managerSolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- tinylab cloud lab, linux lab +1 moreTinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions...10.0 Critical
- tsplus remote workTSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the ...9.8 Critical
- south river technologies titan mft, titan sftp, southrivertech titan ftp server +1 more +3 moreInformation leak via default file permissions on Titan MFT and Titan SFTP servers4.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges8.4 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissions6.5 Medium
- lenovo notebook, bios, d330-10igl firmware +24 more +26 moreA potential vulnerability in a driver used during manufacturing process on some consumer Lenovo...6.7 Medium
- Show moreLoading…