CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- hkuds openharnessHKUDS OpenHarness Insecure Default Remote Channel Allowlist8.3 High
- hkuds openharnessHKUDS OpenHarness Plugin Management Command Exposure8.7 High
- nodejs node, node.js +1 moreA flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was...3.3 Low
- sky co.,ltd. skymec it manager, skysea client view +1 moreSKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation...8.5 High
- artica pandora fms, pandora fms fms +1 moreMissing Authorization in Configuration Ajax Endpoint leads to Information Disclosure8.4 High
- samsung galaxy wearableIncorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers...6.9 Medium
- samsung electronics magicinfo 9 serverSamsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability...7.8 High
- redhat process automation manager, red hat process automation 7 +1 moreRhpam: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- red hat openshift update serviceOsus-operator: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- red hat web terminalWeb-terminal: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- red hat multicluster engine for kubernetes, redhat advanced cluster management for kubernetes +1 moreMce: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- redhat ansible automation platform, red hat ansible automation platform 2, ansible automation platform 2.16 +5 more +7 moreAnsible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions6.4 Medium
- airbus tetra connectivity server (tcs), tetra connectivity server +1 moreLocal privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)5.6 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insecure permissions on private cryptographic keys8.8 High
- anthropic claude sdk for python, anthropics anthropic-sdk-python +1 moreClaude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool4.8 Medium
- wazuh, wazuh wazuh-manager +1 moreWazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Service6.9 Medium
- wazuh, wazuh wazuh-manager +1 moreSSL/TLS Renegotiation DoS in Wazuh Manager authd service6.9 Medium
- internationalization project internationalization, drupal internationalization (i18n) - i18n node submodule +1 moreAccess bypass in Drupal 7 i18n_node translation UI5.3 Medium
- ratoc systems, inc. raid monitoring manager for windowsThe installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation...8.5 High
- capgo cliCapgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations6.8 Medium
- arturia software centerWorld-writable uninstall script executed as root in Arturia Software Center8.2 High
- openclawOpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files6.8 Medium
- zkteco inc. zkbiosecurityZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability6.9 Medium
- redhat fuse, red hat fuse 7 +1 moreFuse: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- red hat openshift data foundation 4.22, redhat openshift data foundation +1 moreNoobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container6.4 Medium
- assa abloy visionlineLocal Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path5.8 Medium
- microsoft .net, .net 10.0 +1 more.NET Elevation of Privilege Vulnerability7.8 High
- digital arts inc. digitalarts@cloud agent (for windows), i-filter ブラウザー＆クラウド multiagent for windows, i-フィルター 10 (windows version only) +8 more +10 moreMultiple i-フィルター products are configured with improper file access permission settings. Files may...6.8 Medium
- acronis cyber protect 17, cyber protect +1 moreLocal privilege escalation due to improper directory permissions. The following products are...5.0 Medium
- acronis cyber protect 17, cyber protect cloud agent, true image +2 more +4 moreLocal privilege escalation due to insecure Unix socket permissions. The following products are...7.8 High
- dell ups multi-ups management console, dell inc. ups multi-ups management console (mumc) +1 moreUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default...8.5 High
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1,...6.7 Medium
- hp system event utilityHP System Event Utility – Denial of Service5.2 Medium
awscliPyPI,rootio-awscliRoot +1 moreAWS CLI: cli_history database does not restrict file permissions on Unix systems5.9 Medium- soliton securebrowser for onegate, securebrowser ii, secureworkspace +1 more +3 moreThe installers for multiple products provided by Soliton Systems K.K. contain an issue with...5.4 Medium
- digital arts inc. finalcode ver.5 series, finalcode ver.6 series +1 moreThe installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default...8.5 High
- genetec update serviceLocal privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows...5.8 Medium
- tenable agent, nessus agent +1 moreImproper Access Control Allows Denial of Service5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2...5.4 Medium
- intel graphics driver, graphics software, linux intel lts kernel +2 moreIncorrect default permissions for some Intel(R) Graphics Driver software within Ring 2:...5.4 Medium
- No product listedIncorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User...5.4 Medium
- No product listedIncorrect default permissions for the Intel(R) Optane(TM) PMem management software before...5.4 Medium
- streetsidesoftware vscode-spell-checkervscode-spell-checker has a workspace-trust bypass Code Execution7.8 High
- veridium sprintworkSprintWork 2.3.1 - Local Privilege Escalation8.5 High
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium benchmarkTanium addressed an incorrect default permissions vulnerability in Benchmark.6.5 Medium
- tanium complyTanium addressed an incorrect default permissions vulnerability in Comply.6.5 Medium
- Show moreLoading…