CWE-281: Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- puppycmsRmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which...9.8 Critical
- gnu grub2If certificates that signed grub are installed into db, grub can be booted directly. It will then...6.4 Medium
- xwiki, xwiki xwiki-platform +1 moreIt's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro7.7 High
- qemuA flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new ...3.3 Low
- mozilla firefoxWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 Medium
- pimcoreAuthorization bypass in Pimcore7.7 High
- nagios xiImproper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...7.8 High
- intel data center managerImproper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow...6.5 Medium
- intel data center managerImproper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access.7.8 High
- intel hid event filter driverImproper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may...7.8 High
- intel processor identification utilityImproper permissions in the installer for the Intel(R) Processor Identification Utility before...7.8 High
- intel advisor toolsImproper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2...7.8 High
- intel falcon 8\+ uas asctec thermal viewer firmwareImproper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all...7.8 High
- intel nuc 8 mainstream-g kit nuc8i5inh firmware, nuc 8 mainstream-g kit nuc8i7inh firmware, nuc 8 mainstream-g mini pc nuc8i5inh firmware +20 more +22 moreInsecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an...7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows Security Feature Bypass Vulnerability6.2 Medium
- nextcloud deckImproper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with...8.0 High
- google androidIn Settings, there is a possible permissions bypass. This could lead to local information...5.5 Medium
- google androidIn core networking, there is a missing permission check. This could lead to local information...5.5 Medium
- google androidIn Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn Telephony, there are possible leaks of sensitive data due to missing permission checks. This...5.5 Medium
- google androidIn NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit...7.8 High
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user...2.7 Low
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproper Preservation of Permissions in Apache Struts7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...6.5 Medium
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent...3.1 Low
- android play core library, google llc android play core +1 moreLocal arbitrary code execution in splitinstall in Android's Play Core8.8 High
- etcd, fedoraproject fedora +1 moreImproper Preservation of Permissions in etcd5.7 Medium
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +2 moreIncorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57...7.5 High
- gogsInsecure Permissions in Gogs6.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....7.5 High
- joomla joomla\!In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not...7.5 High
- cacti, debian linux, fedoraproject fedora +2 moreIn Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...4.3 Medium
- kata containers containers, katacontainers runtime +1 moreKata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file8.8 High
- apple ios, ipados, iphone os +2 moreThe issue was addressed by clearing website permission prompts after navigation. This issue is...5.3 Medium
- gitlabGitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups,...9.1 Critical
- wftpserver wing ftp serverWing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified...7.8 High
- openvpn connectOpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect...7.8 High
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors...5.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare...6.5 Medium
- gentoo portageGentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreInsufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a...8.8 High
- dell red cloak windows agentIn SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of...3.3 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure...2.7 Low
- jenkins support core, jenkins project support core plugin +1 moreMissing permission check in Jenkins Support Core Plugin6.5 Medium
- open-xchange appsuiteOX App Suite through 7.10.2 has Insecure Permissions.8.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PKI key pairs are exported with insecure file permissions6.6 Medium
- Show moreLoading…