CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- cisco mds 9000 series multilayer switches, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +6 more +8 moreCisco NX-OS Software Unauthorized Filesystem Access Vulnerability7.8 High
- cisco firepower 4100 series next-generation firewalls, firepower 9300 series next-generation firewalls, mds 9000 series multilayer switches +9 more +11 moreCisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability6.7 Medium
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Bash Shell Privilege Escalation Vulnerability7.8 High
- netgate pfsenseThe expiretable configuration in pfSense 2.4.4_1 establishes block durations that are...7.5 High
- androidThe permissions on /proc/iomem were world-readable. This could lead to local information...5.5 Medium
- bosch smart cameraAn issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of...3.3 Low
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effective5.3 Medium
- sonicwall sonicos, sonicosv +1 moreIn SonicWall SonicOS, administrators without full permissions can download imported certificates....5.5 Medium
- intel data center managerImproper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an...5.5 Medium
- intel data center managerImproper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an...5.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message...6.5 Medium
- 3s-smart software solutions gmbh codesys control v3 products prior to version 3.5.14.0, codesys control for beaglebone sl, control for empc-a\/imx6 sl +10 more +12 moreIn 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user...9.8 Critical
- fortinet fortiadc, fortios, fortios, fortiadc +1 more +3 moreA Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6...4.3 Medium
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +1 more +3 moreTIBCO Spotfire Fails To Prevent Write Access to Spotfire Library6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...3.5 Low
- imperva securesphereImperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login...8.8 High
- intel ssd data center tool, intel corporation intel(r) ssd data center tool for windows +1 moreImproper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows...7.8 High
- intel sgx sdk, intel corporation intel(r) sgx sdk and platform software for windows, intel sgx platform software +2 moreImproper file verification in install routine for Intel(R) SGX SDK and Platform Software for...7.3 High
- intel corporation intel(r) proset/wireless wifi software, intel proset\/wireless software +1 moreImproper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi...7.8 High
- cisco jabber for mac, jabber +1 moreCisco Jabber Client Framework Insecure Directory Permissions Vulnerability5.1 Medium
- microsoft exchange serverAn information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants...6.5 Medium
- code42The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly...7.8 High
- mxq project tv box firmwareThe MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H...7.1 High
- douco douphpAn issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the...5.3 Medium
- weberpIn webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the...4.9 Medium
- trend micro officescanA Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to...7.5 High
- trend micro officescanA Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- vmware vrealize operationsvRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6...6.7 Medium
- intel system defense utilityImproper directory permissions in the installer for the Intel(R) System Defense Utility (all...5.5 Medium
- intel parallel studio, parallel studio xe +1 moreImproper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold...7.8 High
- intel solid state drive toolboxImproper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an...7.8 High
- intel vtune amplifierImproper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may...7.8 High
- eclipse mosquittoEclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService works could inappropriately gain access to cross origin audio in Media in Google Chrome...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreRemote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome...6.5 Medium
- mcafee true keyTrue Key (TK) Windows Client - Weak Directory Permission Vulnerability7.2 High
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5...9.8 Critical
- metinfoIn Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including...6.1 Medium
- google androidAndroid 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983.7.5 High
- dell openmanage network managerInsecure MySQL Configuration Vulnerability6.5 Medium
- pulsesecure pulse secure desktop clientPulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure...5.5 Medium
- terra-master terramaster operating systemIncorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to...6.5 Medium
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- Show moreLoading…