CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.7 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure PATH7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePre-authenticated Remote Code Execution9.8 Critical
- schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 moreCWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated...7.5 High
- google androidIn multiple locations, there is a possible information leak due to a missing permission check....5.5 Medium
- yokogawa rental & lease corporation unifier, unifier cast +1 moreIncorrect default permissions issue exists in Unifier and Unifier Cast Version.5.0 or later, and...7.8 High
- kaminariKaminari Insecure File Permissions Vulnerability6.6 Medium
- ibm iIBM Performance Tools for i privilege escalation7.4 High
- intel graphics performance analyzer, graphics performance analyzers +1 moreIncorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may...7.8 High
- intel graphics performance analyzer, graphics performance analyzers +1 moreIncorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may...8.2 High
- intel 62x chipsetIncorrect default permissions in some onboard video driver software before version 1.14 for Intel...6.7 Medium
- intel endurance gaming mode software installersIncorrect default permissions in some Endurance Gaming Mode software installers before version 1...6.7 Medium
- nordicsemi nrf sniffer for bluetoothextcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic...7.3 High
- oretnom23 human resource management systemSourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions...8.8 High
- oretnom23 human resource management systemInsecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource...4.3 Medium
- python cpythontempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 High
- clarioClario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to...7.8 High
- linux buildrootBuildroot before 0b2967e lacks the sticky bit for the /dev/shm directory.7.5 High
- octopus serverIt was identified that in certain versions of Octopus Server, that a user created with no...3.5 Low
- acronis cyber protect cloud agentLocal privilege escalation due to insecure folder permissions. The following products are...6.8 Medium
- havelsan dialogueBroken Access Control in Havelsan's Dialogue9.4 Critical
- No product listedMacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine...3.3 Low
- brocade sannav, broadcom brocade sannav +1 moreBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)6.8 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file...7.7 High
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change7.5 High
- No product listedInsecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version...7.3 High
- tcl 10l firmware, 30z firmware +1 moreCertain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre...7.8 High
- No product listedCertain software builds for the Itel Vision 3 Turbo Android device contain a vulnerable pre...6.1 Medium
- No product listedAn issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on...7.1 High
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points4.4 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsecure file permission setting that makes files world-readable5.5 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.8 High
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...2.5 Low
- oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...2.5 Low
- amazon aws amplify cli, aws amplify cli +1 moreAWS Amplify CLI has incorrect trust policy management9.8 Critical
- acquia mauticSensitive Data Exposure due to inadequate user permission settings8.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A low-privileged user can access confidential information5.1 Medium
- redon-tech redon-hub, redon roblox purchasing hub +1 moreRedon-Hub has incorrect permissions on all admin related commands8.8 High
- huawei emui, harmonyos +1 moreVulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of...7.5 High
- wondershare filmoraInsecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to...7.8 High
- huawei emui, harmonyos +1 morePermission verification vulnerability in the lock screen module. Impact: Successful exploitation...5.3 Medium
- Show moreLoading…