CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, avaya aura application enablement services +15 more +17 moreThe poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has...7.1 High
- le-web backintime, fedoraproject fedora +1 morecommon/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777...7.1 High
- sambamount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2,...1.9 Low
- adobe photoshop elementsAdobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure...7.8 High
- trustport antivirus, pc security +1 moreTrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions ...7.8 High
- gnome glib, opensuse, suse linux enterprise server +2 moreThe g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of...7.8 High
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 moreThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as...7.8 High
- debian nss-ldap, linux +1 morenss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which...5.5 Medium
- apple mac os x, mac os x server +1 moreXTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with...5.5 Medium
- dovecotdovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable...2.1 Low
- sambaSamba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb...2.1 Low
- microsoft windows xpThe I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone...7.8 High
- redhat enterprise linuxThe Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp...6.9 Medium
- checkpoint vpn-1 secureclientThe Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for...7.8 High
- wonderware intouchInvensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full...8.8 High
- ibm lotus notes, lotus domino +1 moreIBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7...7.8 High
- ibm db2 universal databaseShared memory sections and events in IBM DB2 8.1 have default permissions of read and write for...7.1 High
- iss blackice pc protection, blackice server protection +1 moreBlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3)...7.1 High
- microsoft windows ntThe Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control...7.1 High