CWE-278: Insecure Preserved Inherited Permissions
A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- jdx mise mise: Incorrect file ownership, when installed by the root user using `install.sh` 6.7 Medium
- cerberus ftp server Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2 7.3 High
- ibm i IBM i privilege escalation 7.2 High
- chaos-mesh, chaos-mesh chaos mesh +1 more Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate... 8.8 High
- b1ackc4t 14finger Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to... 8.8 High
- nixos nix Nix sandbox escape 3.6 Low
- rust-lang cargo, fedoraproject fedora +1 more Cargo not respecting umask when extracting crate archives 7.8 High
- keycloak Keycloak Authentication Error 9.3 Critical