Weakness (CWE)
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
The architecture needs to access and modification attributes for files to only those users who actually require those actions.
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-276
1,060 results · Feed
-
Medium 6.6
File and Directory Permission Vulnerability in Hitachi Command Suite
Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hi…
-
High 7.4
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect …
-
High 7.8
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the ha…
-
Medium 6.1
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to man…
-
Unscored —
In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due …
-
Unscored —
In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in…
-
High 7.8CVE-2023-20178 Public exploit
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco …
-
Unscored —
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local at…
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macO…
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5,…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, m…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able…
-
Unscored —CVE-2023-32407 Public exploit
A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventur…
-
Unscored —
The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced…
-
High 7.7
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings,…
-
Unscored —
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input vali…
-
Unscored —
In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. T…
-
Unscored —
In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under …
-
Unscored —
In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch whil…
-
Unscored —
In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a lo…
-
Unscored —
In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connec…
-
Medium 6.8
An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0…
-
High 8.8
EaseUS Todo Backup may allow local privilege escalation
EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation.
-
Critical 9.1
Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to l…
-
Critical 9.8
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permis…
-
High 7.8
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allo…
-
High 8.6
Deno missing "--allow-net" permission check for built-in Node modules
Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made using the built-in `node:http` or `node:https` modules are incorrectly not checked against the network permission allow list (`--allow-net`).…
-
High 7.0
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. A regular u…
-
Medium 6.7
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware…
-
High 7.1
nfpm vulnerable to Incorrect Default Permissions
nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone u…
-
Critical 9.8
SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedP…
-
High 7.5
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference fi…
-
Unscored —
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. Thes…
-
High 7.4
In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP …
-
Critical 9.8
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because …
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.8
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.5…
-
Medium 4.3
Jenkins AppSpider Plugin missing permission check
A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
-
Medium 4.3
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.
-
High 7.5
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v…