Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
467 results · Clear filters · Feed
-
High 7.0
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. A regular u…
-
High 7.1
nfpm vulnerable to Incorrect Default Permissions
nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone u…
-
High 7.5
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference fi…
-
High 7.4
In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP …
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.8
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.5…
-
High 7.5
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v…
-
High 7.8
In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local es…
-
High 7.1
NGINX Management Suite vulnerability
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Suppo…
-
High 7.5
Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
-
High 8.8
In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to e…
-
High 7.0
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
-
High 7.3
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations…
-
High 7.8
On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Serv…
-
High 8.7
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated adminis…
-
High 7.8
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation.
-
High 7.8
An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to t…
-
High 7.8
Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions o…
-
High 7.1
An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive …
-
High 8.8
An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal syst…
-
High 7.0
Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. An u…
-
High 7.8
Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local at…
-
High 8.8
Fluent Fluentd and Fluent-ui use default password
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
-
High 8.8CVE-2023-25355 Public exploit
CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run com…
-
High 7.3
Directory Permission Vulnerability in Hitachi Ops Center Analyzer
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before …
-
High 8.8
Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set …
-
High 7.0
saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating …
-
High 7.8
rmt-server-pubcloud allows to escalate from user _rmt to root
A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with…
-
High 7.8
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privileg…
-
High 7.8
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privileg…
-
High 8.8
SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privilege…
-
High 7.8
An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running…
-
High 7.8
In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resour…
-
High 8.1
An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint itemtemplate.createtemplat…
-
High 7.5
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this…
-
High 8.1
An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an…
-
High 8.8
Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level orig…
-
High 7.8
When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the rece…
-
High 7.8
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility se…
-
High 7.8
In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions d…