CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- epson xp-255An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the...8.8 High
- brother mfc-j491dwAn issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface...9.1 Critical
- samsung android, samsung mobile devices +1 moreIncorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to...4.0 Medium
- suse opensuse tumbleweedgrub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images7.0 High
- okta verify, verify for windows +1 moreThe Okta Device Access features, provided by the Okta Verify agent for Windows, provides access...7.1 High
- google androidIn updateInternal of MediaProvider.java , there is a possible access of another app's files due...7.8 High
- google androidIn validateAccountsInternal of AccountManagerService.java, there is a possible way to leak...5.5 Medium
- google androidIn handleMessage of UsbDeviceManager.java, there is a possible method to access device contents...7.8 High
- google androidIn installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier...7.8 High
- google androidIn mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to...7.8 High
- google androidIn setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display...7.8 High
- cyberpanelupgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows...10.0 Critical
- cyberpanelgetresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb...10.0 Critical
- aquila cms, aquila-cms aquilacms +1 moreA User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers...5.3 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...3.3 Low
- apple xcodeThis issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An...7.5 High
- ubiquiti unifi network applicationA Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi...8.8 High
- cert vinceCERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.6.5 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request...9.8 Critical
- profilepress, profilepress team pro +1 moreProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider8.1 High
- iconics genesis64, mitsubishi electric corporation genesis32, iconics suite +1 more +3 moreInformation Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS327.8 High
- emlog proArbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation5.2 Medium
- ciliumCIDR deny policies may not take effect when a more narrow CIDR allow is present4.0 Medium
- mitel micollabA vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8...6.7 Medium
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A...5.5 Medium
- acronis cyber filesLocal privilege escalation due to insecure folder permissions. The following products are...7.8 High
- google migrate to containersInsecure user permissions in Google Cloud Migrate to Containers for Windows5.9 Medium
- automatic systems maintenance slimlaneLocal file inclusion in Automatic Systems Maintenance SlimLane...9.8 Critical
- automatic systems maintenance slimlanePrivilege escalation in Automatic Systems Maintenance SlimLane...8.8 High
- juniper junos os evolvedJunos OS Evolved: Low privileged local user able to view NETCONF traceoptions files5.1 Medium
- lenovo dolby vision provisioning software, dolby vision provisioning +1 moreA potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby...5.5 Medium
- paxtechnology paydroid, pax pos terminals +1 morePAX Android based POS devices allow for escalation of privilege via improperly configured scripts...6.7 Medium
- ivanti velocity license serverUnder specific circumstances, insecure permissions in Ivanti Velocity License Server before...7.8 High
- canonical jujuVulnerable juju hook tool abstract UNIX domain socket6.5 Medium
- google androidthere is a possible privilege escalation due to an insecure default value. This could lead to...7.8 High
- google androidN/A8.8 High
- google androidIn pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to...7.8 High
- google androidIn mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write...7.8 High
- google androidN/A7.5 High
- apache tomcat connectors, debian linux +1 moreApache Tomcat Connectors: mod_jk: local users can view and modify configuration5.9 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- linux, linux kernel +1 moreselinux,smack: don't bypass permissions check in inode_setsecctx hook9.8 Critical
- dani-garcia vaultwardenAn issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been...8.8 High
- rockwell automation 2800c optixpanel™ compact, 2800s optixpanel™ standard, embedded edge compute module +5 more +7 moreRockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions7.7 High
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability6.5 Medium
- samsung assistantImproper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1...5.1 Medium
- google androidIn bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to...7.8 High
- google androidIn multiple locations, there is a possible permission bypass due to a confused deputy. This could...7.8 High
- Show moreLoading…