CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- acronis snap deploySensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- sunmochina enterprise management systemIncorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise...7.5 High
kernelopenEuler,linuxDebian,linux-6.1Debian +106 more +108 morentfs3 in the Linux kernel before 6.5.11 allows a physically proximate attacker to read kernel...7.1 High- steveklabnik request storeRequestStore has Incorrect Default Permissions7.8 High
- lenovo accessories and display manager, display control center +1 moreAn insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo...7.8 High
- lenovo accessories and display manager, display control center +1 moreAn insecure permissions vulnerability was reported in Lenovo Display Control Center (LDCC) and...7.8 High
- xuxueli xxl-jobImproper Preservation of Permissions in xxl-job8.8 High
- intel distribution for gdb, distribution for gdb software, oneapi base toolkit +2 moreIncorrect default permissions in some Intel(R) Distribution for GDB software before version 2024...5.4 Medium
- intel nuc m15 laptop kit integrated sensor hub driver packIncorrect default permissions in some Intel(R) ISH software installers may allow an authenticated...5.4 Medium
- intel uniteIncorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software...5.4 Medium
- intel connectivity performance suiteIncorrect default permissions for some Intel(R) Connectivity Performance Suite software...5.4 Medium
- intel advisor, oneapi base toolkit +1 moreIncorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow...5.4 Medium
- intel memory and storage tool guiIncorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an...4.3 Medium
- amd uprof, μprof tool +1 moreIncorrect default permissions in the AMD μProf installation directory could allow an attacker to...7.3 High
- freebsdpf incorrectly matches different ICMPv6 states in the state table6.3 Medium
- apache cloudstackApache CloudStack: User Key Exposure to Domain Admins7.2 High
- samsung android, samsung mobile devices +1 moreImproper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1...5.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 High
- kubean-io kubeanCluster-level privilege escalation in kubean6.0 Medium
- cato networks sdp client, catonetworks cato client +1 moreCato Networks Windows SDP Client Local Privilege Escalation via self-upgrade8.8 High
- apple macosA permissions issue was addressed by removing vulnerable code and adding additional checks. This...5.5 Medium
- apple ios, ipados, macos +5 more +7 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 10...7.1 High
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with...7.8 High
- kube-logging logging-operator, logging operator +1 moreInsecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and...8.8 High
- ni flexlogger, systemlink, systemlink server +2 moreIncorrect Default Directory Permissions for NI SystemLink Redis Service5.5 Medium
- kubernetesIncorrect permissions on Windows containers logs6.1 Medium
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database Core component of Oracle Database Server. Supported...2.3 Low
- oracle peoplesoft enterprise hcm shared componentsVulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft ...5.4 Medium
- rockwell automation factorytalk® policy manager (ftpm), factorytalk® system services (installed via ftpm), rockwellautomation factorytalk policy manager +1 more +3 moreRockwell Automation Unsecured Private Keys in FactoryTalk® System Services1.8 Low
- rockwell automation factorytalk® policy manager (ftpm), factorytalk® system services (installed via ftpm), rockwellautomation factorytalk policy manager +2 moreRockwell Automation Unsecured Private Keys in FactoryTalk® System Services6.0 Medium
- johnson controls software house c•cure 9000 installer, johnsoncontrols software house c-cure 9000 +1 moreSoftware House C•CURE - CouchDB executable protection7.8 High
- eset security, endpoint antivirus, endpoint security +24 more +26 moreDenial of Service in ESET products for Windows6.1 Medium
- citrix workspace app for html5, workspace +1 moreBypass of GACS Policy Configuration settings in Citrix Workspace app for HTML55.3 Medium
- zte zxcloud iraiPermissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI6.3 Medium
- mitsubishi electric corporation melipc series mi5122-vw, mitsubishi melipc mi5122-vw firmware +1 moreIncorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on...8.8 High
- hitachi ops center common servicesFile Permission Vulnerability in Hitachi Ops Center Common Services5.1 Medium
- hitachi job management partner1/extensible snmp agent, jp1/extensible snmp agent, jp1/extensible snmp agent for windows +2 more +4 moreFolder Permission Vulnerability in JP1/Extensible SNMP Agent7.8 High
- ibm security access manager, security verify access docker +1 moreIBM Security Access Manager Docker information disclosure6.2 Medium
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in firewall functionality in Synology Router Manager ...5.9 Medium
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure7.5 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure5.5 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4 Installation Directory permission issue7.4 High
- hitachi storage provider for vmware vcenterFile and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter4.4 Medium
- faronics winselect, winselect (standard + enterprise) +1 moreRead/Write Permissions for Everyone on Configuration File7.7 High
- red hat build of keycloak, build of keycloak 22, single sign-on 7 +4 more +6 moreKeycloak: leak of configured ldap bind credentials through the keycloak admin console2.7 Low
- langchain experimental, langchain-experimental +1 morelangchain_experimental Code Execution via Python REPL access7.8 High
- acronis cloud managerLocal privilege escalation due to insecure folder permissions. The following products are...4.4 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreTOCTOU vulnerability6.7 Medium
- Show moreLoading…