CWE-281: Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains youtrackJetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without...4.3 Medium
- google chromeInsufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865...8.8 High
- google chromeInsufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed...7.4 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x...6.5 Medium
- mozilla firefox, firefox esr +1 moreWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Medium
- pearsonvue console 8, iqsystem 7 +1 moreThe report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26...6.7 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for...4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10...9.8 Critical
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,...9.8 Critical
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWin32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWin32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWin32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWin32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows server 2016, microsoft corporation windows 10 1607, 1703, and windows server 2016 +2 moreGraphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreGraphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,...8.1 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +3 more +5 moreMicrosoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607...7.0 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +5 more +7 moreWindows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreGraphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreGraphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows...7.0 High
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreThe DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016...7.0 High
- microsoft windows 7, windows server 2008, microsoft corporation windows +2 moreA kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2,...7.8 High
- microsoft windows, windows 7, windows 8.1 +8 more +10 moreMicrosoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7...9.8 Critical
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally...7.3 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreMicrosoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607,...7.8 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +3 more +5 moreWindows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,...7.8 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreMicrosoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607,...7.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...4.3 Medium
- jython project jython, opensuse +1 moreJython Improper Access Restrictions vulnerability4.6 Medium
- ibm tivoli storage managerThe Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x...3.3 Low
- redhat ansibleAnsible Arbitrary File Overwrite Vulnerability3.3 Low
- smartySmarty Does Not Consider Umask Values When Setting Permissions7.5 High
- kde, debian linux +1 moreThe (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the...7.5 High
- sun solaris pc netlinkSun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and...7.5 High
- microsoft windows 2000Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories...7.5 High
- debian linuxsash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world...7.8 High