CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- tanium discoverTanium addressed an incorrect default permissions vulnerability in Discover.6.5 Medium
- tanium partner integrationTanium addressed an incorrect default permissions vulnerability in Partner Integration.6.5 Medium
- tanium patchTanium addressed an incorrect default permissions vulnerability in Patch.6.5 Medium
- tanium performanceTanium addressed an incorrect default permissions vulnerability in Performance.6.5 Medium
- tanium enforceTanium addressed an incorrect default permissions vulnerability in Enforce.6.5 Medium
- memuplay memu playMemu Play 7.1.3 - Insecure Folder Permissions8.5 High
- mitsubishi electric corporation freqship-mini for windowsMalicious Code Execution Vulnerability in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows8.8 High
- icinga icinga-powershell-framework, powershell framework +1 moreIcinga for Windows certificate can have too-open permissions6.8 Medium
- schneider electric ecostruxure™ process expert, ecostruxure™ process expert for aveva system platform +1 moreCWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege...7.0 High
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT is Vulnerable to RCE via Disabled Block Execution8.6 High
- icinga, icinga icinga2 +1 moreIcinga has insecure permission of %ProgramData%\icinga2\var on Windows6.8 Medium
- shirt-pocket superduper\!An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the...7.8 High
- acronis cloud managerLocal privilege escalation due to insecure folder permissions. The following products are...6.7 Medium
- todesktop builderImproper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows...7.1 High
- inkscapeTCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app4.8 Medium
- rockstar games launcherRockstar Service - Insecure File Permissions8.5 High
- nodejs node, node.js +1 moreA flaw in Node.js's permission model allows a file's access and modification timestamps to be...2.8 Low
- defenseunicorns peprPepr Overly Permissive RBAC ClusterRole in Admin Mode0.0 None
- millegpg millegpg5MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Escalation8.5 High
- quest kace desktop authorityQuest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for...5.3 Medium
- h3c magic ba1500l firmware, mc102-g firmware +1 moreAn issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless...9.8 Critical
- arduino ide, arduino-ide +1 moreArduino IDE for macOS has Insecure File Permissions4.8 Medium
- arduino ide, arduino-ide +1 moreArduino IDE for macOS has TCC Bypass via Dynamic Library Injection4.8 Medium
- portrait dell color managementAn issue was discovered in the Portrait Dell Color Management application through 3.3.008 for...7.8 High
- portrait dell color managementThe Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,7.8 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- lenovo baiying clientAn improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a...8.5 High
- powerdns recursorInsufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor7.5 High
- red hat openshift dev spacesCodeready-ws: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- shirt-pocket superduper\!An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the...7.8 High
- intercom, inc. security point (windows) of malionIncorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3...4.8 Medium
- wazuhWazuh installation fails to protected authd.pass on Windows1.8 Low
- secuavail logstare collector, logstare inc. collector (for linux), collector (for windows) +2 moreThe installation directory of LogStare Collector is configured with incorrect access permissions....6.8 Medium
- audiocodes fax server, audiocodes limited fax/ivr appliance, audiocodes interactive voice response +2 moreAudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE8.5 High
- audiocodes fax server, audiocodes limited fax/ivr appliance, audiocodes interactive voice response +2 moreAudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE8.5 High
- xwikisas application-admintoolsXWiki AdminTools application doesn't set permissions on the AdminTools space5.3 Medium
- mattermost, mattermost server +1 moreChannel member objects leak read status3.0 Low
- canvaThe Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without...3.2 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: information disclosure via world-readable vm snapshots5.5 Medium
- sonarrSonarr Service Sonarr.Console.exe default permission8.5 High
- No product listedRadarr Service Radarr.Console.exe default permission8.5 High
- lenovo app storeAn improper permissions vulnerability was reported in Lenovo App Store that could allow a local...7.0 High
- lenovo dock managerAn improper default permission vulnerability was reported in Lenovo Dock Manager that, under...5.2 Medium
- datadog datadog-agentDatadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions7.0 High
- schneider electric powerchute™ serial shutdownCWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system...7.3 High
- No product listedIncorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring...8.4 High
- No product listedIncorrect default permissions for some Intel(R) Thread Director Visualizer software before...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) PresentMon before version 2.3.1 within Ring 3:...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software...5.4 Medium
- No product listedIncorrect default permissions for the Intel(R) Processor Identification Utility before version 8...5.4 Medium
- Show moreLoading…