Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
1,060 results · Feed
-
Medium 6.7
Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authent…
-
Medium 6.7
Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated …
-
High 7.4
The same file cannot be opened with different rights
application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a…
-
High 7.3
A privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using Microsoft AutoPilot under …
-
Unscored —
Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download…
-
High 7.8
Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability
-
Medium 6.5
Samba: smb clients can truncate files with read-only permissions
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files …
-
Medium 6.7
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models cou…
-
High 7.0
Privilege Escalation
NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location
-
High 7.8
A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker w…
-
High 7.8
SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows users to abuse incorrect folder permission resulting in Privilege Escalation.
-
High 7.8
SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation.
-
Unscored —
Information leak via default file permissions on Titan MFT and Titan SFTP servers
Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem
-
High 8.4
Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions on a certain system…
-
Medium 6.7
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that w…
-
High 8.4
File and Directory Permission Vulnerability in JP1/Performance Management
Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10…
-
Low 3.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
High 8.0
Rhsso-container-image: unsecured management interface exposed to adjecent network
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensi…
-
High 8.8
Jenkins temporary plugin file created with insecure permissions
Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system te…
-
Medium 5.5
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber…
-
Critical 9.3
Malicious Code Execution Vulnerability in FA Engineering Software Products
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a deni…
-
Medium 4.8
Cri-o: security regression of cve-2022-27652
The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was pr…
-
High 8.8
Privilage Escalation in Saphira Connect
Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.
-
Medium 6.1
Insecure Default Permissions in Wing FTP Server <= 7.2.0
Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.
-
High 7.8CVE-2023-31468 Public exploit
An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\…
-
Medium 5.7
Improper securing of log directory may allow a denial of service
Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.
-
Medium 5.3
Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker …
-
Medium 6.7
Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentiall…
-
Medium 6.7
Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authe…
-
Medium 6.7
Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated …
-
Medium 4.4
Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileg…
-
Medium 6.7
Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before versi…
-
High 7.8
Insecure directory permissions on installer files
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
-
Unscored —
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available aft…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A us…
-
Medium 5.9
Code Execution through overwriting project file on zenon engineering studio system
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing the…
-
Unscored —
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.
-
Unscored —
Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private"…
-
Unscored —
Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Om…
-
Unscored —
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writ…