Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
411 results · Clear filters · Feed
-
Medium 6.5
Incorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated attackers with low-leve…
-
Medium 6.5
Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.
-
Medium 5.5
A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration,…
-
Medium 5.5
A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configur…
-
Medium 6.7
Incorrect default permissions in the Intel(R) SDP Tool for Windows software all versions may allow an authenticated use…
-
Medium 6.7
Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an auth…
-
Medium 6.7
Incorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may…
-
Medium 5.5
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thi…
-
Medium 6.3
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not …
-
Medium 4.3
Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the fil…
-
Medium 5.3
Moodle: lack of access control when using external methods for quiz overrides
A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.
-
Medium 5.3
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addre…
-
Medium 4.4
CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.
VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
-
Medium 5.2
Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation
A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems.
-
Medium 4.0
CIDR deny policies may not take effect when a more narrow CIDR allow is present
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule…
-
Medium 6.7
A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allo…
-
Medium 5.5
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with l…
-
Medium 5.9
Insecure user permissions in Google Cloud Migrate to Containers for Windows
There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" command…
-
Medium 5.0
Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files
An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files, representing an exposure of sensitive information. On all Junos …
-
Medium 5.5
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning softwa…
-
Medium 6.7
PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must hav…
-
Medium 6.5
Vulnerable juju hook tool abstract UNIX domain socket
Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform …
-
Medium 5.9
Apache Tomcat Connectors: mod_jk: local users can view and modify configuration
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Con…
-
Medium 5.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 1…
-
Medium 6.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 1…
-
Medium 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
-
Medium 5.5
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap …
-
Medium 6.7
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authe…
-
Medium 6.7
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially e…
-
Medium 6.7
Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version …
-
Medium 6.7
Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 m…
-
Medium 6.7
Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user …
-
Medium 5.6
Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potential…
-
Medium 6.3
pf incorrectly matches different ICMPv6 states in the state table
In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and block incoming Echo Requests, a crafted Echo Request packet after a Neighbor Solicitation (NS) can trigger an Echo Reply. The packet has to come from the same host as…
-
Medium 6.0
Cluster-level privilege escalation in kubean
Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive …
-
Medium 5.5
Incorrect Default Directory Permissions for NI SystemLink Redis Service
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogg…
-
Medium 6.1
Incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
-
Medium 5.4
Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Text Catalog)…
-
Medium 6.1
Denial of Service in ESET products for Windows
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
-
Medium 5.3
Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5