Weakness (CWE)
CWE-275: Permission Issues
Category Draft Mapping prohibited
Weaknesses in this category are related to improper assignment or handling of permissions.
Source: MITRE CWE-275
2 results · Clear filters · Feed
-
Low 2.8
kubescape Output printresults.go GetWriter permission
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issue…
-
Low 3.3
Local Priviledge escalation in Perfetto Dev scripts
A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2