CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the window management module. Impact: Successful...9.1 Critical
- secnet security network intelligent ac management system security network intelligent ac management systemAn issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local...7.8 High
- macro-expert macro expert, macroexpert +1 moreMacro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%...7.8 High
- fortra robot schedule enterprise agent, robot schedule +1 morePrivilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.047.3 High
- dell grab, grab for windows +1 moreDell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder...6.7 Medium
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.2.8 Low
- elspec-ltd g5dfr firmwareAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The...6.2 Medium
- bmc control-mDLL side-loading in BMC Control-M6.6 Medium
- avsystem unified management platformInsecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567...5.5 Medium
- mdp rotpROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.5.3 Medium
- intel converged security and manageability engineIncorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0...6.7 Medium
- microsoft windows defender antimalware platformMicrosoft Defender Security Feature Bypass Vulnerability5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...3.3 Low
- apple ipados, macos, tvos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple visionosA permissions issue was addressed to help ensure Personas are always protected This issue is...5.5 Medium
- samsung account, samsung mobile samnsung account +1 moreImproper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows...5.1 Medium
- samsung android, samsung mobile devices +1 moreIncorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to...5.3 Medium
- plonePhone information disclosure vulnerability7.5 High
- apache airflowApache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)4.7 Medium
- google android, mediatek mt8678, mediatek, inc. mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8666, mt8666a, mt8666b, mt8667, mt8673, mt8675, mt8676, mt8678 +2 moreIn da, there is a possible permission bypass due to a missing permission check. This could lead...8.2 High
- couchbase serverCouchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin...7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the web-based management interface of ClearPass Policy Manager could allow a...4.8 Medium
- acronis cyber protect 16, cyber protect +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- openvpn, openvpn gui +1 moreThe OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions...8.4 High
- apple ios, ios and ipados, ipad os +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS...7.8 High
- apple macos, tvos, watchos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1,...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- td advanced dashboard, tdbank td-advanced-dashboard +1 moreThe TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution...8.4 High
- emerson data record ad, flexlogger, g web development software +6 more +8 moreIncorrect directory permissions for the shared NI RabbitMQ service may allow a local...7.8 High
- emerson data record ad, flexlogger, g web development software +5 more +7 moreIncorrect permissions for shared NI SystemLink Elixir based services7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API5.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the calendarProvider module.Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 morePermission management vulnerability in the lock screen module.Successful exploitation of this...7.5 High
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation8.0 High
- canonical lxd, tianocore edk2 +1 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS...6.7 Medium
- intel system usage reportIncorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901...6.7 Medium
- intel oneapi toolkits, advisor, cluster checker +15 more +17 moreImproper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R)...6.0 Medium
- intel virtual raid on cpuIncorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow...6.7 Medium
- intel chipset driver software, chipset device software +1 moreIncorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444...6.7 Medium
- intel assistive context-aware toolkitIncorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0...6.7 Medium
- siemens polarion almA vulnerability has been identified in Polarion ALM (All versions). The affected product is...7.8 High
- raidenftpdInsecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a...7.3 High
- vercel pkgLocal Privilege Escalation in execuatables bundled by pkg6.6 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions...5.5 Medium
- google androidIn BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from...7.8 High
- progress telerik test studioPrivilege Elevation via Telerik Test Studio7.8 High
- hitachi storage plug-in for vmware vcenter, storage plug-in +1 moreDirectory and File Permission Vulnerability in Hitachi Storage Plug-in for VMware vCenter7.9 High
- flexera installshieldInstallShield Symlink Vulnerability Affecting Suite Project Setups5.5 Medium
- eduva albo pretorio online, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposure5.3 Medium
- canonical ubuntu pipewire-pulseUbuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio...5.5 Medium
- Show moreLoading…