CWE-279: Incorrect Execution-Assigned Permissions
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- osquery osquery: Unprivileged users can temporarily read file carve contents 4.4 Medium
- firewalld, red hat enterprise linux 10, enterprise linux 10.0 extended update support +6 more +8 more Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 5.5 Medium
- cisco secure firewall adaptive security appliance (asa) software A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in... 7.2 High
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 more Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 6.5 Medium
- red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more +4 more Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions 8.5 High
- ibm aspera faspex 5, aspera faspex +1 more Incorrect Execution-Assigned Permissions in IBM Aspera Faspex 3.8 Low
- altera quartus prime pro, intel quartus prime +1 more Quartus Prime Pro Edition Installer Advisory 5.4 Medium
- containerd containerd affected by a local privilege escalation via wide permissions on CRI directory 7.3 High
- apache streampark Apache StreamPark: Authenticated users can trigger remote command execution 7.3 High
- coder Coder's privilege escalation vulnerability could lead to a cross workspace compromise 8.1 High
- nvidia doca-host and mellanox ofed NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker... 7.6 High
- No product listed Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™... 5.1 Medium
- No product listed Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™... 8.8 High
- No product listed Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™... 5.1 Medium
- google android In dump of WindowManagerService.java, there is a possible way of running dumpsys without the... 4.0 Medium
-
aws-cdk-libnpm aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role 2.2 Low -
linuxRoot,linux-allwinner-5.19Ubuntu,linux-awsUbuntu +168 more +170 more Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800... 2.0 Low - open automation software automation software, openautomationsoftware open automation software, oas platform +2 more Open Automation Software Incorrect Execution-Assigned Permissions 8.5 High
- intel advanced link analyzer standard edition software installer advanced link analyzer standard edition software installer Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition... 5.4 Medium
- open-emr openemr An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST... 9.8 Critical
- gog galaxy A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta)... 6.7 Medium
- adobe connect Privilage Escalation in Saphira Connect 8.8 High
- gitlab Incorrect Execution-Assigned Permissions in GitLab 6.5 Medium
- escanav escan anti-virus MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions 7.8 High
- ipython, debian linux, fedoraproject fedora +2 more Execution with Unnecessary Privileges in ipython 8.2 High
- umask project umask Permissions bypass in pleaser 7.8 High
- apache solr Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings 7.5 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues 6.1 Medium
- elastic x-pack, x-pack security +1 more Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document... 4.3 Medium