CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- oracle mysql server, mysql cluster +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). ...1.8 Low
- No product listedNorthern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.9.1 Critical
- tecno com.transsion.carlcareImproper permission settings for mobile applications (com.transsion.carlcare) may lead to ...7.5 High
- ibm sterling secure proxyIBM Sterling Secure Proxy improper input validation9.1 Critical
- ibm robotic process automationIBM Robotic Process Automation privilege escalation6.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +10 more +12 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.8 High
- No product listedInsecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information...6.5 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 morePhoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation8.8 High
- sap se netweaver as for abap and abap platform (internet communication framework), sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)9.9 Critical
- No product listedHasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File...4.7 Medium
- No product listedAn issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to...8.8 High
- dell powerscale onefsDell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for...5.0 Medium
- No product listedThe com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme)...9.1 Critical
- No product listedThe com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for...9.1 Critical
- acronis true image, true image oem +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- trend micro, inc. micro deep security, trendmicro deep security agent +1 moreAn incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents...6.7 Medium
- red hat fuse 7, openshift container platform 4.12, openshift container platform 4.13 +6 more +8 moreOpenshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials7.6 High
- checkmkUser-Readable Private Key in Windows Agent4.8 Medium
- ibm iIBM i incorrect privilege assignment6.8 Medium
- surrealdbSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE2.3 Low
- open design alliance cde inweb sdkExposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.36.9 Medium
- zealopensource accept stripe payments using contact form 7Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure5.3 Medium
- teamviewer patch & asset managementInsufficient permissions in the TeamViewer Patch & Asset Management component7.1 High
- ivanti desktop and server management, desktop \& server management +1 moreInsufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated...7.1 High
- ivanti sentry, standalone sentry +1 moreInsecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local...8.8 High
- ivanti patch sdk, endpoint manager, neurons agent platform +4 more +6 moreInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...7.1 High
- teltonika networks rutos, tswos, teltonika-networks rutos devices +2 moreIncorrect Permission Assignment in RutOS based routers and TSWOS based managed switches5.9 Medium
- open automation software automation software, openautomationsoftware open automation software, oas platform +2 moreOpen Automation Software Incorrect Execution-Assigned Permissions8.5 High
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- i-o data device, inc. ud-lt1, ud-lt1/ex +1 moreIncorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.8...6.5 Medium
- devolutions remote desktop managerIncorrect permission assignment in temporary access requests component in Devolutions Remote...8.1 High
- devolutions serverIncorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0...5.0 Medium
- veeam service provider consoleFrom the VSPC management agent machine, under condition that the management agent is authorized...7.1 High
- No product listedThe GriceMobile com.grice.call application 4.5.2 for Android enables any installed application ...8.2 High
stalldopenSUSEstalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp...4.1 Medium- atlassian confluence data center, confluence server +1 moreThis Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of...6.4 Medium
- sharp corporation multiple mfps (multifunction printers)Affected devices create coredump files when crashed, storing them with world-readable permission....5.9 Medium
- panda security dome, pandasecurity panda dome +1 morePanda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.0 High
- bitdefender total securityG DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.0 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 High
- qnap notes station 3Notes Station 38.4 High
- m-files corporation ainoIncorrect evaluation of effective permissions in M-Files Aino5.3 Medium
- wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 moreWAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices7.1 High
- wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 moreWAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices5.7 Medium
- intel dsa software, driver \& support assistant +1 moreInsecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow...5.4 Medium
- intel *, computing improvement program +1 moreInsecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow...5.4 Medium
- ivanti connect secure, policy secure +1 moreIncorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...7.8 High
- ivanti secure access clientIncorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local...7.3 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected...8.3 High
- Show moreLoading…