CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreCODESYS Control PKI Exposure Enables Remote Certificate Access8.3 High
- liquidfilesLiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows...9.9 Critical
- nvidia gpu display driversNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest...5.5 Medium
- x-d lab langchain-chatglm-webuiInsecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view...9.8 Critical
- array networks vapv, vxag +1 moreArray Networks vAPV and vxAG Default Credential Privilege Escalation10.0 Critical
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.1 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...9.8 Critical
- meddream pacs premium, pacs server +1 moreAn incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues...9.3 Critical
- d2iq, inc. dc/os marathonDC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse9.3 Critical
- mozilla firefoxSandboxed iframe could start downloads9.8 Critical
- ibm storage scaleIBM Storage Scale information disclosure6.5 Medium
- ivanti sentryEnables an authenticated user (enrolled device) to access a service protected by Sentry even if...6.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Low-privileged user can cause script to run as root, leading to privilege escalation8.5 High
- apache apisix, apache software foundation apisix java plugin runner +1 moreApache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges7.8 High
- debian dpkgdpkg-deb: Fix cleanup for control member with restricted directories8.2 High
- nixos nixThe Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build...3.2 Low
- canon usa inc. eos webcam utility proCanon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation4.6 Medium
- canonical cloud-initcloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with...5.9 Medium
- nagios host, teamviewer full client, full client (win7/8) +1 more +3 moreIncorrect Permission Assignment for Critical Resource in TeamViewer Remote Management7.0 High
- sangfor atrustSangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.4.3 Medium
- fastgptFastGPT Sandbox Vulnerable to Sandbox Bypass6.3 Medium
- acronis cyber protect 16Local privilege escalation due to insecure folder permissions. The following products are...7.3 High
- ibm application gatewayIBM Application Gateway incorrect permission assignment5.5 Medium
- splunk universal forwarder, splunk/universalforwarder for windows +1 moreIncorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade8.0 High
- lenovo pc manager, pcmanager +1 moreAn improper permission handling vulnerability was reported in Lenovo PC Manager that could allow...6.9 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v...5.0 Medium
- codelibs fessFess has Insecure Temporary File Permissions1.2 Low
- grupo espiral ms panloader.exePrivilege Escalation in Panloader.exe8.5 High
- checkmkSensitive data exposed during automatic agent updates4.3 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreIncorrect Permission Assignment for Critical Resource7.2 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreIncorrect Permission Assignment for Critical Resource6.5 Medium
- gstreamerGStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.0 High
- lumigo autodeploy-layerInsecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and...8.8 High
- lumigo measure-cold-startInsecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and...8.8 High
- devsapp fc-stable-diffusionInsecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges...8.8 High
- versa concertoVersa Concerto Insecure Docker Mount Container Escape8.6 High
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 2...5.5 Medium
- google chromeIncorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior...9.6 Critical
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....8.5 High
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....6.8 Medium
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.2 High
- sap se gateway clientInformation Disclosure vulnerability in SAP Gateway Client6.6 Medium
- suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 moreTemporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen5.3 Medium
- ixon vpn clientIXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there...8.1 High
- ixon vpn clientIXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because...8.1 High
- nvidia vgpu software, cloud gamingNVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager ...5.5 Medium
- abb automation builderIncorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information...8.4 High
- abb automation builderVulnerability in user management of Automation Builder8.5 High
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...6.7 Medium
- Show moreLoading…