CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component7.5 High
- ivanti endpoint managerInsecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4...7.1 High
- xen windows pv driversWinPVDrivers: Excessive permissions on user-exposed devices9.4 Critical
- xen windows pv driversWinPVDrivers: Excessive permissions on user-exposed devices9.4 Critical
- xen windows pv driversWinPVDrivers: Excessive permissions on user-exposed devices9.4 Critical
- kubevirtKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes6.9 Medium
- apple ipados, macos, visionos +3 more +5 moreA privacy issue was addressed by moving sensitive data. This issue is fixed in watchOS 26.1, iOS...6.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1...3.3 Low
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26...5.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1...2.4 Low
- centreon infra monitoringCentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON8.4 High
- No product listedAn Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain...6.2 Medium
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories8.8 High
- red hat openshift virtualization 4, rhel-8-cnv-4.12, rhel-9-cnv-4.14 +4 more +6 moreContainer-native-virtualization: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate...7.8 High
- mongodb atlas sql odbc driverMongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories8.8 High
- apache activemq-artemis, red hat amq broker 7, rhel-9 based middleware containers +2 moreAmq: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- No product listedThe seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions...7.7 High
- the wikimedia foundation mediawiki - thanks extension, mediawiki - growth experiments extensionDo permission checking when getting counts of global and local edits, new articles and thanks6.9 Medium
- fsas technologies inc. eternus sf advancedcopy manager standard edition (for rhel 7/ 8/ 9), eternus sf advancedcopy manager standard edition (for solaris 10/ 11), eternus sf advancedcopy manager standard edition (for windows server 2016/ 2019/ 2022) +5 more +7 moreETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions...8.4 High
- the wikimedia foundation mediawiki - growthexperiments extensionInsufficient permission checks in action=growthsetmentor6.9 Medium
- newforma project centerNewforma Info Exchange (NIX) default anonymous access6.9 Medium
- mongodb inc connector for biMongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories8.8 High
- absolute secure accessExcess Permissions in Warehouse5.3 Medium
- nvidia appNVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation...7.8 High
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 moreOpenshift-ai: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- rapid7 appspider proRapid7 Appspider Broken Access Control Vulnerability3.3 Low
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow8.5 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions6.9 Medium
- dragonflyoss dragonflyDirectories created via os.MkdirAll are not checked for permissions2.0 Low
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent insecure default file permissions5.7 Medium
- No product listedCYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability....8.8 High
- dell powerprotect data managerDell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect...7.0 High
- dell powerprotect data managerDell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s)...7.8 High
- n-able n-centralN-central Incorrect Default Permissions could lead to Privilege Escalation7.0 High
- apache dolphinschedulerApache DolphinScheduler Incorrect Default Permissions Vulnerability9.8 Critical
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the...8.1 High
- digital arts inc. i-filter ブラウザー＆クラウド multiagent for windows, i-フィルター 6.0, i-フィルター for zaq +4 more +6 moreMultiple i-フィルター products contain an issue with incorrect default permissions. If this...8.5 High
- cursorTCC Bypass via misconfigured Node fuses in Cursor4.8 Medium
- nozbeTCC Bypass via misconfigured Node fuses in Nozbe4.8 Medium
- mosh-proTCC Bypass via misconfigured Node fuses in Mosh-Pro4.8 Medium
- lenovo pc manager, pcmanager +1 moreAn improper permission vulnerability was reported in Lenovo PC Manager that could allow a local...8.5 High
- No product listedIncorrect default permissions for some AI Playground software before version v2.3.0 alpha may...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) Distribution for Python software installers...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) Graphics Driver software installers may allow an...5.4 Medium
- gimpTCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app4.8 Medium
- operator-framework operator-sdk, red hat multicluster engine for kubernetes, multicluster engine for kubernetes 2.6 +26 more +28 moreOperator-sdk: privilege escalation due to incorrect permissions of /etc/passwd6.4 Medium
- 4cstrategies exonaut4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.6.5 Medium
- codesys runtime toolkit, control for beaglebone sl, control for empc-a/imx6 sl +9 more +11 moreCODESYS Toolkit Exposes Sensitive Files via Default Permissions5.5 Medium
- Show moreLoading…