cve.bz

CWE-276: Incorrect Default Permissions, page 30

Filter

During installation, installed file permissions are set to allow anyone to modify those files.

What the weakness is: CWE-276 at MITRE

Ask an AI about CWE-276

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-276: Incorrect Default Permissions and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/276.html and https://cve.bz/cve/cwe/276?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.2CVE-2012-5578EPSS 0.4%

    Python keyring has insecure permissions on new databases allowing world-readable files to be created

  2. 8.8CVE-2019-19202EPSS 1.0%

    In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2 to a POST request.

  3. 7.8CVE-2019-17421EPSS 0.6%

    Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload.

  4. 5.5CVE-2012-6136EPSS 0.3%

    tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

  5. 7.8CVE-2019-14602EPSS 0.3%

    Improper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

  6. 4.3CVE-2012-1157EPSS 1.2%

    Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

  7. 7.5CVE-2010-5108EPSS 1.3%

    Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.

  8. 7.1CVE-2019-4652EPSS 0.3%

    IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170…

  9. 5.5CVE-2013-1425EPSS 0.3%

    ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.

  10. 5.3CVE-2019-1982EPSS 1.0%

    A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker t…

  11. 6.1CVE-2019-12752EPSS 0.4%

    The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system.

  12. 5.3CVE-2019-18369EPSS 1.1%

    In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.

  13. 5.3CVE-2019-18367EPSS 0.7%

    In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.

  14. 5.3CVE-2019-18366EPSS 1.1%

    In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.

  15. 7.5CVE-2012-5577EPSS 1.8%

    Python keyring lib before 0.10 created keyring files with world-readable permissions.

  16. 6.5CVE-2019-14925EPSS 1.3%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read s…

  17. 4.3CVE-2019-10474EPSS 0.7%

    A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system.

  18. 4.3CVE-2019-10473EPSS 0.7%

    A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

  19. 6.5CVE-2019-10472EPSS 0.8%

    A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing cr…

  20. 6.5CVE-2019-10470EPSS 0.8%

    A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

  21. 6.5CVE-2019-10469EPSS 0.8%

    A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method…

  22. 4.3CVE-2019-10465EPSS 0.8%

    A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attac…

  23. 6.5CVE-2019-10463EPSS 0.8%

    A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

  24. 7.5CVE-2019-16919EPSS 1.7%

    Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access…

  25. 4.4CVE-2019-15962EPSS 0.3%

    A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission…

  26. 7.8CVE-2019-14737ExploitEPSS 1.7%

    Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.

  27. 7.8CVE-2019-17044EPSS 0.4%

    An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially craft…

  28. 7.8CVE-2019-17043EPSS 0.4%

    An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared libra…

  29. 7.8CVE-2019-2173EPSS 0.2%

    In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…

  30. 7.8CVE-2019-2114EPSS 0.2%

    In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no …

  31. 6.7CVE-2019-14510EPSS 0.5%

    An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx (e.g., FSAdmin123456789) on the server that hosts the LAN Cache and all client…

  32. 8.8CVE-2015-9477EPSS 1.4%

    The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.

  33. 8.8CVE-2015-9476EPSS 1.4%

    The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.

  34. 8.8CVE-2015-9475EPSS 1.5%

    The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.

  35. 8.8CVE-2015-9474EPSS 1.5%

    The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.

  36. 7.8CVE-2019-17365EPSS 0.4%

    Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.

  37. 9.8CVE-2019-17383EPSS 2.4%

    The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.

  38. 9.8CVE-2019-17124ExploitEPSS 23%

    Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

  39. 7.8CVE-2019-16913EPSS 0.4%

    PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: (F)" to the contents of the directory and its subfolders. In addition, the p…

  40. 7.1CVE-2019-3688EPSS 0.3%

    The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This all…

  41. 3.3CVE-2019-17056EPSS 0.6%

    llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.

  42. 3.3CVE-2019-17054EPSS 0.5%

    atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.

  43. 3.3CVE-2019-17053EPSS 0.5%

    ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.

  44. 3.3CVE-2019-17052EPSS 0.6%

    ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.

  45. 7.8CVE-2018-19592EPSS 1.1%

    The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to …

  46. 6.7CVE-2019-12670EPSS 0.3%

    A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficien…

  47. 9.8CVE-2019-3689EPSS 1.5%

    The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This…

  48. 8.8CVE-2019-9679EPSS 0.9%

    Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDB…

  49. 5.5CVE-2019-16355EPSS 0.4%

    The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.

  50. 7.5CVE-2019-16106EPSS 1.1%

    The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm txtNewUserName and hdNP fields.