cve.bz

CWE-275: Permission Issues, page 2

Filter

Weaknesses in this category are related to improper assignment or handling of permissions.

What the weakness is: CWE-275 at MITRE

Ask an AI about CWE-275

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-275: Permission Issues and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/275.html and https://cve.bz/cve/cwe/275?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2019-11146EPSS 0.3%

    Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

  2. 7.8CVE-2019-11145EPSS 0.3%

    Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

  3. 3.3CVE-2016-10796EPSS 0.4%

    cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).

  4. 3.3CVE-2017-18427EPSS 0.4%

    In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).

  5. 2.5CVE-2017-18425EPSS 0.3%

    In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

  6. 3.3CVE-2017-18422EPSS 0.4%

    In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272).

  7. 3.3CVE-2017-18397EPSS 0.4%

    cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).

  8. 7.8CVE-2017-18390EPSS 0.5%

    cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322).

  9. 6.5CVE-2016-10818EPSS 1.6%

    cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).

  10. 8.1CVE-2016-10846EPSS 1.3%

    cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

  11. 6.5CVE-2017-9327EPSS 1.2%

    Secret data of processes managed by CM is not secured by file permissions.

  12. 9.8CVE-2017-17060EPSS 1.2%

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.

  13. 7.8CVE-2019-1618EPSS 0.4%

    A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to an incorrect permiss…

  14. 4.2CVE-2018-0449EPSS 0.3%

    A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated priv…

  15. 5.5CVE-2017-1418EPSS 0.3%

    IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete th…

  16. 9.8CVE-2018-15379ExploitEPSS 86%

    A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to exec…

  17. 7.8CVE-2016-7066EPSS 0.3%

    It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.

  18. 5.3CVE-2014-6047ExploitEPSS 5.7%

    phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

  19. 8.1CVE-2017-1396EPSS 0.8%

    IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 127342.

  20. 8.1CVE-2017-2590EPSS 1.3%

    A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delet…

  21. 5.5CVE-2018-0392EPSS 0.3%

    A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user. The vulnerability is due to insufficient access control permissions (i.e., World-Readable). An attacker co…

  22. 7.5CVE-2016-9061EPSS 1.6%

    A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and ope…

  23. 7.5CVE-2016-5299EPSS 1.6%

    A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems …

  24. 6.5CVE-2013-3703EPSS 0.9%

    The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.

  25. 4.4CVE-2012-5628EPSS 0.3%

    gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.

  26. 4.3CVE-2013-4201EPSS 0.7%

    Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.

  27. 5.5CVE-2013-4040EPSS 0.3%

    IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive inform…

  28. 7.8CVE-2016-8732EPSS 0.6%

    Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn of…

  29. 5.5CVE-2017-5809EPSS 1.6%

    A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

  30. 8.8CVE-2016-8520EPSS 1.4%

    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

  31. 8.1CVE-2014-1632ExploitEPSS 10%

    htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

  32. 7.5CVE-2014-1631ExploitEPSS 9.3%

    Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

  33. 9.8CVE-2017-16887ExploitEPSS 37%

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

  34. 5.5CVE-2015-7889ExploitEPSS 2.3%

    The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attacker…

  35. 7.5CVE-2017-17876ExploitEPSS 9.5%

    Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.

  36. 8.8CVE-2017-11463EPSS 2.4%

    In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. In other words, a normal user can send r…

  37. 7.1CVE-2017-8153EPSS 0.6%

    Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScrip…

  38. 3.3CVE-2017-2694EPSS 0.5%

    The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert …

  39. 5.3CVE-2017-7145EPSS 0.8%

    An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data.

  40. 4.3CVE-2017-7144EPSS 1.3%

    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie m…

  41. 5.9CVE-2017-7088EPSS 1.9%

    An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext Auto…

  42. 5.5CVE-2016-4924EPSS 0.3%

    An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptograph…

  43. 7.1CVE-2015-7842EPSS 0.7%

    Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288…

  44. 7.8CVE-2015-8300EPSS 0.6%

    Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file.

  45. 8.8CVE-2015-5153EPSS 1.2%

    Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

  46. 7.5CVE-2015-7781EPSS 7.1%

    ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

  47. 4.3CVE-2016-4873EPSS 1.2%

    Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function.

  48. 5.5CVE-2015-8223EPSS 0.2%

    Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to the camera driver.

  49. 4.3CVE-2017-0884EPSS 0.7%

    Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folder…

  50. 6.4CVE-2017-0883EPSS 0.6%

    Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasi…