Skip to content
OpenAdvisories

Weakness (CWE)

CWE-276: Incorrect Default Permissions

Base Draft

During installation, installed file permissions are set to allow anyone to modify those files.

How to prevent it (2 mitigations)

  1. Architecture and Design, Operation

    The architecture needs to access and modification attributes for files to only those users who actually require those actions.

  2. Architecture and Design

    Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.

    Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.

Source: MITRE CWE-276

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-55215 Public exploit

    An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization inte…

  • Critical 9.8
    CVE-2023-29919 Public exploit EPSS 60%

    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because …

  • Critical 9.8
    CVE-2023-26918 Public exploit

    Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan…

  • Critical 9.8
    CVE-2013-0632 Exploited Public exploit EPSS 93%

    administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

    KEV Mar 3, 2022