CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient access control vulnerability in Dynamic Application Loader software for Intel(R)...7.8 High
- intel proset\/wireless wifiImproper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software...7.8 High
- intel quartus ii, quartus prime +1 moreImproper directory permissions in the installer for Intel(R) Quartus(R) software may allow an...7.8 High
- intel acu wizardImproper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an...7.8 High
- gitlabAn insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and...7.5 High
- microsoft nugetNuGet Package Manager Tampering Vulnerability5.5 Medium
- yeelight smart ai speaker firmwareYeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART...6.8 Medium
- gitlabAn Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise...4.3 Medium
- gitlabAn Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise...6.5 Medium
- gitlabAn Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise...6.5 Medium
- sylabs singularity, fedoraproject fedora, opensuse backports +1 more +3 moreIncorrect Permission Assignment for Critical Resource in Singularity8.8 High
- foxitsoftware foxit readerA Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been...7.8 High
- anker-in roav dashcam a1 firmwareAn exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on...5.3 Medium
- seagate nas osInsufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS...7.5 High
- sierrawireless airlink es450 firmwareAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task...8.8 High
- cisco nexus 9000 series application centric infrastructure, nx-os software for nexus 9000 series fabric switches aci mode +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability7.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a...7.0 High
- asus zenfone 3 max firmwareThe ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0...7.1 High
- hisilicon hi3510 firmwareInsecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510...8.8 High
- kubernetes, netapp trident, redhat openshift container platform +2 morekubectl creates world-writeable cached schema files3.3 Low
- intel media sdkImproper directory permissions in installer for Intel(R) Media SDK before 2018 R2.1 may allow an...7.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...8.1 High
- nvidia jetson tx2, jetson tegra tx2 +1 moreNVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL...7.8 High
- uipath orchestratorUiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of...8.8 High
- utimaco securityserver cse firmwareIncorrect Access Controls of Security Officer (SO) in PKCS11 R2 provider that ships with the...6.5 Medium
- the foreman foreman, redhat satellite +1 moreIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Medium
- ibm spectrum protect, spectrum protect backup-archive client, spectrum protect for virtual environments +2 moreIBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by...5.1 Medium
- apple macos, mac os x +1 moreA permissions issue existed in the handling of the Apple ID. This issue was addressed with...5.5 Medium
- apple macos, mac os x +1 moreA permissions issue existed in which execute permission was incorrectly granted. This issue was...5.5 Medium
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege escalation vulnerability exists in the privileged helper tool of...7.1 High
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- ibm spectrum protectIBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and...5.1 Medium
- pronestor health monitoringThe Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook...7.3 High
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege escalation vulnerability exists in the privileged helper tool of...7.1 High
- nagios xiPrivilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to...7.8 High
- marel food processing systems pluto platform, pluto1203, pluto2 +2 moreSystems using the Marel Food Processing Systems Pluto platform do not restrict remote access....9.8 Critical
- kioware serverKioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder...7.8 High
- five9 agent desktop plusFive9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).9.8 Critical
- five9 agent desktop plusFive9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to...7.5 High
- cobham satcom sailor 800 firmware, satcom sailor 900 firmware +1 moreCobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary...7.5 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the...7.8 High
- intel graphics driver, intel corporation intel(r) graphics driver for windows +1 moreInsufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before...6.3 Medium
- intel graphics driver, intel corporation intel(r) graphics driver for windows +1 moreInsufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before...2.3 Low
- intel graphics driver, intel corporation intel(r) graphics driver for windows +1 moreInsufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before...3.3 Low
- intel capability licensing service, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +1 moreInsufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1...6.7 Medium
- microvirt memuAn issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable...7.8 High
- microsoft azure, walinuxagent +1 moreAn information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files...6.5 Medium
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os +1 moreCisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability7.8 High
- Show moreLoading…