CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- lfprojects mlflowExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udf7.0 High
- owncloud anroid apkAn issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate...6.8 Medium
- meabillis cms cmsIncorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address...7.5 High
- cayenne anonymous restricted contentAnonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- mra13 simple membershipSimple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor5.3 Medium
- moodleMoodle: idor when deleting oauth2 linked accounts7.5 High
- audimex audimexeeAn issue in Audimex EE v.15.1.20 and before allows a remote attacker to escalate privileges.8.8 High
- esoft planner, esoftplanner esoft planner +1 moreA discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login?...5.3 Medium
- google androidIn the getHost() function of UriTest.java, there is the possibility of incorrect web origin...9.8 Critical
- google androidIn createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there...7.8 High
- google androidIn bootloader there is fastboot command allowing user specified kernel command line arguments....7.3 High
- lemonldap-ngAn issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh...8.8 High
- delinea privilege managerDelinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.6.5 Medium
- avscmsAVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.9.8 Critical
- quickheal antivirus pro antivirus proIncorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated...6.5 Medium
- quickheal antivirus pro antivirus pro, quickheal total security total security +1 moreAn issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total...8.8 High
- rsa netwitness platformIn RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a...7.5 High
- google androidIn setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings...7.8 High
- google androidIn createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to...7.8 High
- google androidIn the read() function of ProcessStats.java, there is a possible read/write serialization issue...6.7 Medium
- hewlett packard enterprise (hpe) cray system management softwareA security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS)....5.5 Medium
- google androidIn createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading...7.8 High
- hewlett packard enterprise (hpe) sgi cxfsA security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS)....5.5 Medium
- No product listedBy default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other...7.8 High
- No product listedBy default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI...7.8 High
- primx cryhodBy default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users...7.8 High
- No product listedBy default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users...7.8 High
- No product listedBy default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users...7.8 High
- hcl software connectionsHCL Connections is vulnerable to a broken access control vulnerability3.7 Low
- intel sdp software, server debug and provisioning tool +1 moreIncorrect default permissions in the Intel(R) SDP Tool for Windows software all versions may...5.4 Medium
- intel distribution for pythonIncorrect default permissions in some Intel(R) Distribution for Python software before version...5.4 Medium
- intel binary configuration tool software for windows binary configuration tool software for windowsIncorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows...5.4 Medium
- jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 moreRestarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin8.0 High
- intel 3rd generation intel xeon scalable processor family, 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 more +3 moreIncorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations...8.5 High
- amd provisioning console, provisioning console (apc) software, provisioning console apc software +2 moreIncorrect default permissions in the AMD Provisioning Console installation directory could allow...7.3 High
- amd management consoleIncorrect default permissions in the AMD Management Console installation directory could allow an...7.3 High
- amd ryzen master utility for overclocking control, ryzen master +1 moreIncorrect default permissions in the AMD RyzenTM Master Utility installation directory could...7.3 High
- amd ryzen™ master monitoring sdk, ryzen master, ryzen master monitoring software development kit +2 moreIncorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory...7.3 High
- amd cloud manageability service, cloud manageability service software, cloud manageability service acms software +2 moreIncorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation...7.3 High
- amd management plug-in for sccm, management plugin for sccm +1 moreIncorrect default permissions in the AMD Management Plugin for the Microsoft® System Center...7.3 High
- amd software: adrenalin edition, software: cloud edition, software: pro edition +5 more +7 moreIncorrect default permissions in the AMD HIP SDK installation directory could allow an attacker...7.3 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...5.3 Medium
- xenlibxl leaks data to PVH guests via ACPI tables5.5 Medium
- sap se netweaver application server abap, netweaver and abap platform +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- moodleMoodle: lack of access control when using external methods for quiz overrides5.3 Medium
- hasomed elefantLocal Privilege Escalation via Weak Service Binary Permissions7.8 High
- gnu guixguix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are...8.1 High
- trimble tm4webTrimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func...9.8 Critical
- goodwy com right dialerThe Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any...7.5 High
- lush 2 2An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic...8.8 High
- Show moreLoading…