CWE-276: Incorrect Default Permissions, page 15

During installation, installed file permissions are set to allow anyone to modify those files.

What the weakness is: CWE-276 at MITRE

1. 7.5CVE-2023-43984EPSS 0.6%2023-11-07

   Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table.

2. 7.8CVE-2023-41726EPSS 0.6%2023-11-03

   Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

3. 6.5CVE-2023-4091EPSS 1.3%2023-11-03

   A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol a…

4. 6.7CVE-2022-4575EPSS 0.2%2023-10-30

   A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.

5. 7.8CVE-2023-5623EPSS 0.2%2023-10-26

   NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

6. 8.0CVE-2023-45990EPSS 0.9%2023-10-25

   Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges.

7. 7.8CVE-2023-3112EPSS 0.2%2023-10-25

   A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to execute code with elevated privileges.

8. 10.0CVE-2022-42150EPSS 1.1%2023-10-19

   TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.

9. 7.8CVE-2023-35183EPSS 0.2%2023-10-19

   The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation.

10. 7.8CVE-2023-35181EPSS 0.2%2023-10-19

    The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows users to abuse incorrect folder permission resulting in Privilege Escalation.

11. 9.8CVE-2023-27133EPSS 0.9%2023-10-17

    TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2…

12. 4.9CVE-2023-45690EPSS 1.8%2023-10-16

    Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem

13. 7.8CVE-2023-44194EPSS 0.2%2023-10-13

    An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions…

14. 7.8CVE-2022-3431EPSS 0.2%2023-10-09

    A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying …

15. 7.8CVE-2023-3440EPSS 0.2%2023-10-03

    Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: f…

16. 5.5CVE-2023-4065EPSS 0.2%2023-09-27

    A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of…

17. 7.8CVE-2023-44157EPSS 0.3%2023-09-27

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.

18. 9.8CVE-2022-4039EPSS 0.8%2023-09-22

    A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modi…

19. 7.5CVE-2023-42261EPSS 0.9%2023-09-21

    Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environ…

20. 8.8CVE-2023-43496EPSS 1.0%2023-09-20

    Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with acc…

21. 7.5CVE-2023-5042EPSS 0.4%2023-09-20

    Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.

22. 7.8CVE-2023-4088EPSS 0.2%2023-09-20

    Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and…

23. 5.3CVE-2022-3466EPSS 0.2%2023-09-15

    The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022…

24. 8.8CVE-2023-4664EPSS 0.9%2023-09-15

    Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.

25. 8.8CVE-2023-37878EPSS 0.5%2023-09-12

    Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.

26. 7.8CVE-2023-31468ExploitEPSS 1.0%2023-09-11

    An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as …

27. 9.8CVE-2023-31068ExploitEPSS 5.4%2023-09-11

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.

28. 9.8CVE-2023-31067ExploitEPSS 5.5%2023-09-11

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.

29. 5.3CVE-2023-34352EPSS 0.6%2023-09-06

    A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.

30. 5.5CVE-2023-2737EPSS 0.1%2023-08-16

    Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.

31. 7.1CVE-2023-32492EPSS 0.1%2023-08-16

    Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to information disclosure or allowing to modify files.

32. 7.8CVE-2023-32663EPSS 0.1%2023-08-11

    Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

33. 7.8CVE-2023-32547EPSS 0.1%2023-08-11

    Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access.

34. 7.8CVE-2023-32543EPSS 0.1%2023-08-11

    Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

35. 7.8CVE-2023-31246EPSS 0.1%2023-08-11

    Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.

36. 7.8CVE-2023-27505EPSS 0.1%2023-08-11

    Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access.

37. 4.4CVE-2023-27392EPSS 0.2%2023-08-11

    Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access.

38. 7.8CVE-2022-43702EPSS 0.2%2023-07-27

    When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

39. 7.8CVE-2022-43701EPSS 0.2%2023-07-27

    When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

40. 9.8CVE-2023-33745EPSS 1.0%2023-07-27

    TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password).

41. 7.8CVE-2023-38410EPSS 0.2%2023-07-27

    The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to elevate privileges.

42. 5.4CVE-2023-3323EPSS 0.3%2023-07-24

    A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabili…

43. 7.8CVE-2023-26077EPSS 0.4%2023-07-24

    Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.

44. 5.3CVE-2023-38335EPSS 1.2%2023-07-20

    Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libra…

45. 6.5CVE-2023-38334EPSS 0.9%2023-07-20

    Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class…

46. 8.8CVE-2023-31462EPSS 1.0%2023-07-20

    An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.

47. 7.8CVE-2020-36695EPSS 0.2%2023-07-18

    Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tunin…

48. 10.0CVE-2023-29131EPSS 0.4%2023-07-11

    A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.

49. 7.8CVE-2023-32183EPSS 0.2%2023-07-07

    Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.

50. 6.8CVE-2023-21513EPSS 0.4%2023-06-28

    Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition.