Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
467 results · Clear filters · Feed
-
High 7.8
Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability
Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2,…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1,…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authen…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local a…
-
High 7.3
Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)
The Kolide Agent (aka: Launcher) is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent (known as `launcher`) allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. The bug was introd…
-
High 8.8
An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via…
-
High 7.8
In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could le…
-
High 8.8
Incorrect default permissions in Cradlepoint NetCloud Exchange
The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal (non-admin) user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and …
-
High 7.0
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflo…
-
High 7.5
Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vect…
-
High 7.5
Moodle: idor when deleting oauth2 linked accounts
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.
-
High 8.8
An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges. Analyzing the of…
-
High 7.8
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissio…
-
High 7.8
In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local…
-
High 7.8
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions …
-
High 7.5
In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an…
-
High 8.8
An issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total Security v24.0 allows …
-
High 8.8
An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticate…
-
High 8.1
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users …
-
High 7.8
In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missi…
-
High 7.8
In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. …
-
High 7.8
In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permission…
-
High 7.8
In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypa…
-
High 7.8
By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical …
-
High 7.8
By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission…
-
High 7.8
By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical fi…
-
High 7.8
By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical fil…
-
High 7.8
By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical fil…
-
High 8.0
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous buil…
-
High 7.2
Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) S…
-
High 7.8
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission…
-
High 7.8
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlock…
-
High 7.8
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a l…
-
High 7.8
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone du…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
High 7.0
grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.
-
High 7.3
Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve…
-
High 7.3
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve p…