CWE-281: Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- silabs z-wave software development kitAn issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.8.8 High
- silabs z-wave software development kitInsecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...6.2 Medium
- silabs z-wave software development kitInsecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...6.5 Medium
- silabs z-wave software development kitInsecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...6.5 Medium
- silabs z-wave software development kitInsecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...6.5 Medium
- silabs z-wave software development kitInsecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...8.8 High
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- No product listedThe Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed...7.5 High
- treeverse lakefsRe-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion5.7 Medium
- rcloneRclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata5.4 Medium
- No product listedThe com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android...4.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 High
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for...7.8 High
- m-files corporation connector for copilotPermission bypass in M-Files Connector for Copilot5.3 Medium
- google androidIn onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections...8.4 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.5 High
- xuxueli xxl-jobImproper Preservation of Permissions in xxl-job8.8 High
- zabbixSystem Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission4.3 Medium
- zabbixZabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe6.1 Medium
- zscaler client connectorZscaler bypass with administrative privileges on Windows7.2 High
- hms-networks ewon cosy\+ firmware, ewon cosy firmware +1 moreInsecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a...7.5 High
- apple macosA permissions issue was addressed by removing vulnerable code and adding additional checks. This...5.5 Medium
- apple ios, ipados, macos +5 more +7 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 10...7.1 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed through improved state management. This issue is fixed in watchOS 10.6,...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...7.1 High
- apple macosAn input validation issue was addressed with improved input validation. This issue is fixed in...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app...5.5 Medium
- enalean tuleapTuleap's recursive permissions to document manager folder are not properly applied4.8 Medium
- hp inc. display controlPotential vulnerabilities have been identified in the HP Display Control software component...6.5 Medium
- hitachi ops center common servicesFile Permission Vulnerability in Hitachi Ops Center Common Services5.1 Medium
- openkruise kruiseInsecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate...10.0 Critical
- authzed spicedbPermissions processing error in spacedb3.7 Low
- zte zxhn h388x, zxhn h388x firmware +1 morePermission and Access Control Vulnerability in ZTE H388X7.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server can reshare read&share only folder with more permissions8.1 High
- tenable nessus agentPrivilege Escalation7.8 High
- tenable nessusWhen installing Nessus to a directory outside of the default location on a Windows host, Nessus...7.8 High
- git, fedoraproject fedora +1 moreCloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will3.9 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Medium
- Show moreLoading…