CWE-277: Insecure Inherited Permissions
A product defines a set of insecure permissions that are inherited by objects that are created by the program.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- checkmk gmbh checkmk Privilege escalation via unprotected Windows agent data folder 6.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more Podman: arbitrary file write when importing oci archive 5.5 Medium
- lenovo app store, legion zone +1 more A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App... 7.3 High
- github view component view_component: Preview Route Can Dispatch Inherited Helper Methods 6.5 Medium
- openclaw OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions 2.3 Low
- deepcool deepcreative Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local... 7.8 High
- apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... 5.5 Medium
- intel graphics software, graphics driver, linux intel lts kernel +2 more Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0... 5.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 more Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface 7.2 High
- authzed spicedb SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results 2.9 Low
- osc ondemand Open OnDemand RPM packages create world writable locations 6.9 Medium
- No product listed Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before... 5.4 Medium
- portabilis i-educar Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions 5.3 Medium
- agasta easy touch plus firmware An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device... 6.5 Medium
- coder Coder's privilege escalation vulnerability could lead to a cross workspace compromise 8.1 High
- amazon ecs Information Disclosure in Amazon ECS Container Agent 5.3 Medium
- ibm storage scale IBM Storage Scale information disclosure 6.5 Medium
- anaconda conda-build Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution 6.0 Medium
- ibm security guardium, guardium data protection +1 more IBM Security Guardium privilege escalation 6.7 Medium
- django-helpdesk project django-helpdesk django-helpdesk Allows Sensitive Data Exposure 5.1 Medium
- No product listed Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before... 6.9 Medium
- No product listed Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network... 5.4 Medium
- No product listed Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before... 5.4 Medium
- sap businessobjects business intelligence platform Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform 6.6 Medium
- dell wyse management suite Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions... 6.8 Medium
- apple macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS... 5.5 Medium
- ibm robotic process automation IBM Robotic Process Automation privilege escalation 6.7 Medium
- intel dsa software, driver \& support assistant +1 more Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow... 5.4 Medium
- intel *, computing improvement program +1 more Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow... 5.4 Medium
- cursor TCC Bypass in Cursor's macOS Application 3.8 Low
- xuxueli xxl-job Improper Preservation of Permissions in xxl-job 8.8 High
- intel hid event filter driver, nuc m15 laptop kit lapbc510, nuc m15 laptop kit lapbc510 firmware +15 more +17 more Insecure inherited permissions in some Intel(R) HID Event Filter software installers before... 5.4 Medium
- intel flexlm license daemons for intel fpga, fpga add-on +1 more Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before... 5.4 Medium
- pulpproject pulp, red hat ansible automation platform 2, satellite 6 +1 more +3 more Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 6.7 Medium
- kumahq kuma Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate... 8.8 High
- external-secrets, external-secrets external secrets operator +1 more Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and... 9.8 Critical
- projectcontour contour Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate... 9.8 Critical
- entrust datacard xps card printer driver Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows... 8.4 High
- talelin lin-cms-java-core Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to... 7.5 High
- apache airflow Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler 8.8 High
- mozilla firefox Firefox Android missed activation delay to prevent tapjacking 8.8 High
- ppgo jobs project jobs Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows... 6.3 Medium
- apple ipados, macos, ios and ipados +2 more +4 more This issue was addressed with improved permissions checking. This issue is fixed in macOS Sonoma... 7.8 High
- intel power gadget, power gadget software +1 more Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may... 6.7 Medium
- intel extreme tuning utility Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow... 6.7 Medium
- apple ipados, macos, ios and ipados +2 more +4 more This issue was addressed with improved checks This issue is fixed in iOS 17.5 and iPadOS 17.5,... 5.5 Medium
- apple macos A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5.... 7.8 High
- apple ipados, macos, safari +8 more +10 more The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,... 5.5 Medium
- apple macos A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing... 7.1 High
- e-trust horacius Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker... 8.4 High
- Show olderLoading…