CWE-281: Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- openatom openharmonytelephony_call_manager has an improper preservation of permissions vulnerability5.5 Medium
- vivo systemuiSystemUI component protection settings vulnerability4.8 Medium
- hp support assistant, hp, inc. hp support assistant +1 moreHP Support Assistant – Potential Escalation of Privilege7.1 High
- absolute secure accessPrivilege escalation in the management console of Absolute Secure Access prior to version 13.547.0 High
- google androidIn multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the...4.4 Medium
- modernwmsAn issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password...7.5 High
- wikimedia foundation mediawikiCascading protection is not preventing file reversions0.0 None
- wikimedia foundation mediawiki"reupload-own" restriction can be bypassed by reverting file0.0 None
- apple ipados, macos, ios and ipados +1 more +3 moreA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4,...7.8 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- openpanelAn issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix...8.0 High
- No product listedAn issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via...8.8 High
- google androidIn wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a...7.8 High
- google androidIn dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow...8.4 High
- tsplus remote accessInsecure permissions in TSplus Remote Access v17.30 allow attackers to retrieve a list of all...5.8 Medium
- rapid7 velociraptorVelociraptor Shell Plugin Prevent_execve Bypass3.8 Low
- No product listedInsecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2...9.8 Critical
- discoursePotential bypass of chat permissions in Discourse4.3 Medium
- easyvirt co2scope, dcscope +1 moreEasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0 are vulnerable to Incorrect Access Control. This...8.8 High
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moresnowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions4.4 Medium
- ruoyiRuoYi vulnerable to Denial of Service by attackers with admin privileges4.9 Medium
- apple macosThe issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia...5.5 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.7...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...3.3 Low
- couchbase serverAn issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the...6.5 Medium
- oracle communications order and service managementVulnerability in the Oracle Communications Order and Service Management product of Oracle...5.4 Medium
- oracle workflowVulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens...5.4 Medium
- musing studio writefreelyInsecure default config access in WriteFreely8.4 High
- gitoxidelabs gitoxidegix-worktree-state nonexclusive checkout sets executable files world-writable5.0 Medium
- No product listedIncorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to...9.1 Critical
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...8.1 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...8.8 High
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access...8.8 High
- No product listedCertain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server...6.0 Medium
- seacmsSeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an...9.1 Critical
- seacmsSeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an...9.1 Critical
- No product listedThe com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes)...7.7 High
- No product listedAn Escalation of Privilege security vulnerability was found in SecureAge Security Suite software...9.8 Critical
- codeastro complaint management systemAn issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate...9.8 Critical
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...4.6 Medium
- apple garagebandThis issue was addressed with improved validation of the process entitlement and Team ID. This...7.8 High
- matterIn Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes...7.5 High
- No product listedInsecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before...4.6 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2...7.8 High
- apple macosThe issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 11...5.5 Medium
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia...9.8 Critical
- silabs z-wave software development kitSilicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.4.6 Medium
- Show moreLoading…