Weakness (CWE)

CWE-281: Improper Preservation of Permissions

Base Draft

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

Source: MITRE CWE-281

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

High 7.1

CVE-2025-55130 Public exploit

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions …

nodejs node nodejs nodejs Debian Ubuntu Alpine

Jan 20, 2026
High 7.5

CVE-2024-57698 Public exploit

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes wit…

Apr 29, 2025
High 7.8

CVE-2025-30456 Public exploit

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …

Apple macOS iOS and iPadOS macOS iOS

Mar 31, 2025
High 8.4

CVE-2024-44193 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local atta…

Apple iTunes for Windows Windows

Oct 2, 2024
High 8.8

CVE-2022-38577 Public exploit

ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability …

Sep 19, 2022
High 8.8

CVE-2022-1227 Public exploit

Podman publishes a malicious image to public registries

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. Th…

podman github.com/containers/podman/v3 libpod golang-github-containers-psgo Debian Ubuntu Alpine Go

Apr 29, 2022
High 8.8

CVE-2021-45008 Public exploit

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to ad…

Feb 21, 2022