Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
1,060 results · Feed
-
Medium 4.4
In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points
In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing reading and writing access to sensitive files. The vulnerability could allow a sudo privileged user on t…
-
Medium 5.5
Insecure file permission setting that makes files world-readable
Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without the required privileges to access sensitive information or a Java binary.
-
High 7.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Low 3.7
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 2.5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…
-
Low 2.5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…
-
Critical 9.8
AWS Amplify CLI has incorrect trust policy management
Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remain…
-
Medium 5.0
Junos OS and Junos OS Evolved: A low-privileged user can access confidential information
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential information on the system. On all Junos OS and Junos OS Evolved platforms, when NETCONF traceoption…
-
High 8.8
Redon-Hub has incorrect permissions on all admin related commands
Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, including admin commands. This allows users to receive products for free and delete/create/update products/t…
-
High 7.5
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will …
-
High 7.8CVE-2024-26574 Public exploit
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code v…
-
Medium 5.3
Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability …
-
Critical 9.1
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this v…
-
High 7.8
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate pri…
-
High 7.8CVE-2024-27674 Public exploit
Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" …
-
High 7.3
Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04
Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges…
-
Medium 6.7
Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A…
-
Low 2.8
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
-
Medium 6.2
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world read…
-
Medium 6.6
DLL side-loading in BMC Control-M
BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with t…
-
Medium 5.5
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with …
-
Medium 5.3
ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file perm…
-
Medium 6.7
Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authentic…
-
Medium 5.5
Microsoft Defender Security Feature Bypass Vulnerability
Microsoft Defender Security Feature Bypass Vulnerability
-
Medium 6.2
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS …
-
Medium 5.5CVE-2024-22889 Public exploit
Phone information disclosure vulnerability
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.
-
High 8.2
In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of …
-
Medium 4.7
Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2.8.2 and newer, Ops and Viewer users do …
-
High 7.5
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals en…
-
Medium 4.8
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authent…
-
Medium 5.5
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber…
-
High 8.4
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation d…
-
High 8.4
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be abl…
-
High 8.4
The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of…
-
High 7.8
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitM…
-
High 7.8
Incorrect permissions for shared NI SystemLink Elixir based services
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.
-
Medium 5.3
Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API
The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates b…
-
High 7.5
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affec…
-
High 7.5
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect …
-
Medium 5.9
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…