CWE-732: Incorrect Permission Assignment for Critical Resource, page 17

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

What the weakness is: CWE-732 at MITRE

1. 4.3CVE-2022-4365EPSS 0.7%2023-01-12

   An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak the sentry …

2. 5.3CVE-2022-4630EPSS 0.7%2022-12-21

   Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.

3. 7.5CVE-2022-42949EPSS 0.6%2022-12-21

   Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.

4. 7.8CVE-2022-43517EPSS 0.2%2022-12-13

   A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to o…

5. 6.5CVE-2022-23143EPSS 0.6%2022-12-05

   ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files.

6. 6.5CVE-2022-46338EPSS 0.7%2022-11-30

   g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive …

7. 4.3CVE-2022-45307EPSS 0.4%2022-11-29

   Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder.

8. 4.3CVE-2022-45306EPSS 0.4%2022-11-29

   Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder.

9. 4.3CVE-2022-45305EPSS 0.4%2022-11-29

   Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Python311 and all files located in that folder.

10. 4.3CVE-2022-45304EPSS 0.4%2022-11-29

    Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\Cmder and all files located in that folder.

11. 4.3CVE-2022-45301EPSS 0.4%2022-11-29

    Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\ruby31 and all files located in that folder.

12. 5.5CVE-2022-41926EPSS 0.3%2022-11-25

    Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that t…

13. 7.8CVE-2022-44725EPSS 0.2%2022-11-17

    OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).

14. 3.3CVE-2022-34314EPSS 0.2%2022-11-14

    IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.

15. 8.8CVE-2022-45193EPSS 0.5%2022-11-12

    CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation.

16. 5.5CVE-2022-44746EPSS 0.1%2022-11-07

    Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.

17. 7.8CVE-2022-44733EPSS 0.2%2022-11-07

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39900.

18. 7.8CVE-2022-44732EPSS 0.2%2022-11-07

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39900.

19. 5.5CVE-2022-2188EPSS 0.2%2022-11-07

    Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the …

20. 8.8CVE-2022-3258EPSS 0.3%2022-11-03

    Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

21. 5.5CVE-2022-32929EPSS 0.3%2022-11-01

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPadOS 16. An app may be able to access iOS backups.

22. 7.8CVE-2022-36122EPSS 0.2%2022-10-21

    The Automox Agent before 40 on Windows incorrectly sets permissions on key files.

23. 7.3CVE-2022-22248EPSS 0.2%2022-10-18

    An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local user to modify the contents of a configuration file which could cause another user to execute arbitrary…

24. 5.5CVE-2022-26238EPSS 0.2%2022-10-06

    The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to acces…

25. 5.5CVE-2022-26236EPSS 0.2%2022-10-06

    The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers…

26. 4.3CVE-2022-39284EPSS 1.1%2022-10-06

    CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or `Response::setCookie()`. As a result cookie values are erro…

27. 6.7CVE-2022-2975EPSS 0.2%2022-10-06

    A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue …

28. 6.5CVE-2022-26240EPSS 0.7%2022-10-06

    The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access…

29. 5.5CVE-2022-26239EPSS 0.2%2022-10-06

    The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access …

30. 5.5CVE-2022-26237EPSS 0.2%2022-10-06

    The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access…

31. 8.8CVE-2022-40756EPSS 0.8%2022-09-30

    If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/writ…

32. 4.9CVE-2022-23726EPSS 0.7%2022-09-30

    PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.

33. 5.3CVE-2020-15329EPSS 0.8%2022-09-29

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.

34. 5.3CVE-2020-15328EPSS 0.8%2022-09-29

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.

35. 4.3CVE-2022-32169EPSS 0.7%2022-09-28

    The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

36. 4.3CVE-2022-40817EPSS 0.5%2022-09-27

    Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related an…

37. 4.3CVE-2022-35250EPSS 0.9%2022-09-23

    A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any authenticated user to view Direct messages without appropriate permissions.

38. 8.8CVE-2022-40298EPSS 0.7%2022-09-23

    Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair …

39. 9.9CVE-2022-28802EPSS 1.5%2022-09-21

    Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unint…

40. 9.8CVE-2017-20148EPSS 1.1%2022-09-20

    In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls.

41. 7.1CVE-2022-2995EPSS 0.4%2022-09-19

    Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups…

42. 7.8CVE-2022-2332EPSS 0.2%2022-09-16

    A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.

43. 5.3CVE-2022-22330EPSS 0.9%2022-09-13

    IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X…

44. 5.5CVE-2022-20399EPSS 0.10%2022-09-13

    In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. …

45. 7.8CVE-2022-20398EPSS 0.10%2022-09-13

    In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interactio…

46. 5.4CVE-2022-39207EPSS 1.0%2022-09-13

    Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save build artifacts for later retrieval. They can be accessed through OneDev's web UI after the successful run of a build. Thes…

47. 8.8CVE-2022-36103EPSS 0.7%2022-09-13

    Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR (certificate signin…

48. 6.7CVE-2022-37771EPSS 0.4%2022-09-06

    IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

49. 6.7CVE-2022-36670EPSS 0.3%2022-09-06

    PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted …

50. 4.7CVE-2022-38170EPSS 0.6%2022-09-02

    In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and a…