CWE-281: Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain...6.3 Medium
- linux kernel, fedoraproject fedora +1 moreAn unauthorized access to the execution of the setuid file with capabilities flaw in the Linux...7.8 High
- jenkins continuous integration with toad edge, jenkins project continuous integration with toad edge plugin +1 moreMissing permission check in Jenkins Continuous Integration with Toad Edge Plugin4.3 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS...5.5 Medium
- jenkins release helper, jenkins project release helper plugin +1 moreMissing permission checks in Jenkins Release Helper Plugin4.3 Medium
- heimdalsecurity heimdal premium securityHeimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure...7.8 High
- google androidIn deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to...7.8 High
- google androidIn checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external...7.8 High
- google androidIn createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic...7.8 High
- pleskPlesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege...8.8 High
- intel quartus primeImproper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard...7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 moreImportant: kernel security, bug fix, and enhancement update7.8 High
- containerd, fedoraproject fedora +1 moreImproper Preservation of Permissions in containerd8.0 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +60 more +62 morePossible access control violation while setting current permission for VMIDs due to improper...7.8 High
- google androidIn GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission...7.8 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei harmonyosThere is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful...8.6 High
- huawei emui, magic ui +1 moreThere is an Improper permission control vulnerability in Huawei Smartphone.Successful...5.3 Medium
- tmate tmate-ssh-serverWorld-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a...7.0 High
- google androidIn hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine...5.5 Medium
- google androidIn getSigningKeySet of PackageManagerService.java, there is a missing permission check. This...5.5 Medium
- google androidIn getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an...7.8 High
- google androidIn the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP...7.8 High
- google androidIn onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a...7.8 High
- google androidIn AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without...8.8 High
- google androidIn setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access...7.8 High
- google androidIn createNoCredentialsPermissionNotification and related functions of AccountManagerService.java,...5.5 Medium
- huawei harmonyosThere is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful...7.5 High
- cloudflare octorpkiImproper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki7.5 High
- intel 7265 firmware, ac 3165 firmware, ac 3168 firmware +9 more +11 moreInsecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for...7.8 High
- gitlabImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with...2.6 Low
- google androidIn requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass...7.8 High
- google androidIn enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a...5.5 Medium
- apple macos, mac os x +1 moreA permissions issue existed. This issue was addressed with improved permission validation. This...7.8 High
- moby, fedoraproject fedora +1 moreInsufficiently restricted permissions on data directory in Docker Engine6.3 Medium
- moby, fedoraproject fedora +1 more`docker cp` allows unexpected chmod of host files2.8 Low
- apple macos, mac os x +1 moreThe issue was addressed with improved permissions logic. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may gain access…5.5 Medium
- hashicorp vaultHashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.04.4 Medium
- mozilla firefoxIf a user had granted a permission to a webpage and saved that grant, any webpage running on the...9.8 Critical
- trend micro apex one, officescan +1 moreAn incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service...8.8 High
- acronis true imageAcronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to...7.8 High
- huawei e3372 firmware, e8372 firmware +1 moreHuawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker...6.5 Medium
- zte zxhn h168n, zxhn h168n firmware +1 moreA ZTE product has an information leak vulnerability. Due to improper permission settings, an...6.5 Medium
- intel computing improvement programImproper permissions in the installer for the Intel(R) Computing Improvement Program software...7.8 High
- intel vtune profilerInsecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before...7.8 High
- blizzard battle.netBattle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability...7.8 High
- netlify kiali-operator, redhat openshift service mesh +1 moreAccess control flaw in Kiali8.8 High
- google androidIn updateNotification of BeamTransferManager.java, there is a missing permission check. This...5.5 Medium
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in Elasticsearch5.3 Medium
- jetbrains upsourceIn JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly7.5 High
- Show moreLoading…