CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- salesforce agentforce vibes extension, agentforce vibes +1 moreIncorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce...5.3 Medium
- salesforce mulesoft anypoint code builderIncorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft...5.3 Medium
- eset endpoint antivirus, endpoint security for windows, file security for microsoft azure +10 more +12 moreDenial-of-service vulnerability in ESET security products for Windows6.8 Medium
- nagios xiNagios XI < 2024R2 Privilege Escalation via process_perfdata.pl8.4 High
- nagios xiNagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files5.1 Medium
- progress software flowmonPrivilege escalation via writable configuration files in Progress Flowmon6.7 Medium
- arista networks danz monitoring fabricOn affected platforms, restricted users could use SSH port forwarding to access host-internal services7.5 High
- arista networks danz monitoring fabricOn affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.7.8 High
- floragunn search guard flxUnauthorized access to fields protected by Field Masking (FM) for fields of type IP6.0 Medium
- floragunn search guard flxUnauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object6.0 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource6.9 Medium
- the wikimedia foundation mediawiki - lockdown extensionThe compare API module breaks Extension:Lockdown10.0 Critical
- dahua ipc, sd +1 moreA vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with...6.8 Medium
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in...7.0 High
- liferay dxp, portal, digital experience platform +2 moreLiferay has Incorrect Permission Assignment for Critical Resource4.8 Medium
- usta information systems inc. aybs interaktifAuthorization Bypass in Usta Information Systems' Aybs Interaktif6.7 Medium
- macenhance macforgeMacForge 1.2.0 Beta 1 - Local Privilege Escalation8.5 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Build Pipeline8.7 High
- imonitor software inc. eamLocal Privilege Escalation via Insecure Update Mechanism in iMonitor EAM7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource6.9 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking6.9 Medium
- vasion virtual appliance host, print application (saas/va), print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions9.3 Critical
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource7.2 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource7.2 High
- wondershare repairitWondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability9.1 Critical
- dragonflyoss dragonflyDirectories created via os.MkdirAll are not checked for permissions2.0 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure2.3 Low
- benimposBenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation...7.8 High
- siemens simatic virtualization as a service (sivaas)A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions...9.3 Critical
- wago coupler 0750-0362, coupler 0750-0362/0000-0001, coupler 0750-0362/0040-0000 +7 more +9 moreImproper Permission Handling Enables Unauthorized Access to Firmware and Certificates7.5 High
- roocode roo code, roocodeinc roo-code +1 moreRoo Code: Potential Remote Code Execution via .code-workspace8.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server router will crash when incorrect lsid is set on a sharded query6.5 Medium
- nvidia doca with collectx-dpeserverNVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that...7.3 High
- nvidia doca with collectx-clxapidevNVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an...7.3 High
- ibm transformation advisorIBM Transformation Advisor incorrect permissions8.4 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- acronis cyber protect cloud agentLocal privilege escalation due to insecure folder permissions. The following products are...7.8 High
- dos co., ltd. ss1, ss1 cloud +1 moreIncorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and...7.3 High
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for...7.8 High
- cgm clininetExcessive permissions on configuration files containing database logins and passwords9.4 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal users are able to add system admin portlets to pages6.7 Medium
- pdq smart deployInsecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to...7.8 High
- dell idrac service module (ism), emc idrac service module +1 moreDell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission...5.3 Medium
- ubiquiti inc uisp applicationMultiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a...8.8 High
- agent-zeroInsecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via...7.3 High
- ibm edge application managerIBM Edge Application Manager incorrect permissions6.1 Medium
- gitlabIncorrect Permission Assignment for Critical Resource in GitLab5.0 Medium
- No product listedGPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file...7.8 High
- huawei harmonyosPermission control vulnerability in the distributed clipboard module. Impact: Successful...5.7 Medium
- freefloat ftp serverFreeFloat FTP Server Arbitrary File Upload9.3 Critical
- Show moreLoading…