cve.bz

CWE-732: Incorrect Permission Assignment for Critical Resource, page 26

Filter

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

What the weakness is: CWE-732 at MITRE

Ask an AI about CWE-732

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-732: Incorrect Permission Assignment for Critical Resource and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/732.html and https://cve.bz/cve/cwe/732?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.4CVE-2020-8768EPSS 1.8%

    An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be disco…

  2. 7.8CVE-2020-1704EPSS 0.3%

    An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could…

  3. 9.8CVE-2020-9024EPSS 1.8%

    Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.

  4. 5.4CVE-2020-7050EPSS 0.5%

    Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the H…

  5. 8.1CVE-2019-11215EPSS 1.2%

    In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling ajax.dataloader with a maliciously crafted payload. Many conditions can place the configuration fil…

  6. 7.8CVE-2020-0563EPSS 0.3%

    Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access.

  7. 6.1CVE-2020-7051EPSS 0.8%

    Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.

  8. 7.8CVE-2020-0668ExploitEPSS 26%

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671,…

  9. 8.0CVE-2019-13321EPSS 1.2%

    This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must connect to a mal…

  10. 5.3CVE-2011-4912EPSS 0.8%

    Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.

  11. 7.8CVE-2019-20358EPSS 4.6%

    Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when execute…

  12. 7.8CVE-2019-7656EPSS 0.5%

    A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/* core pr…

  13. 7.8CVE-2019-19363ExploitEPSS 4.4%

    An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later…

  14. 7.8CVE-2019-19895EPSS 0.4%

    In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement…

  15. 5.5CVE-2019-19894EPSS 0.3%

    In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\I…

  16. 9.8CVE-2012-2087EPSS 2.7%

    ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.

  17. 5.5CVE-2019-14629EPSS 0.3%

    Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.

  18. 8.8CVE-2019-3683EPSS 0.9%

    The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. Thi…

  19. 7.8CVE-2019-20327EPSS 0.3%

    Insecure permissions in cwrapper_perl in Centreon Infrastructure Monitoring Software through 19.10 allow local attackers to gain privileges. (cwrapper_perl is a setuid executable allowing execution of Perl scripts with root privileges.)

  20. 7.8CVE-2019-16784EPSS 0.7%

    In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user (at least more than the c…

  21. 5.5CVE-2019-19727EPSS 0.4%

    SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

  22. 4.3CVE-2019-19263EPSS 0.6%

    GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.

  23. 4.3CVE-2019-19262EPSS 0.8%

    GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.

  24. 4.3CVE-2019-19087EPSS 0.7%

    Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).

  25. 4.3CVE-2019-19086EPSS 0.7%

    Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).

  26. 6.1CVE-2019-19736EPSS 0.6%

    MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie via cross-site scripting.

  27. 7.8CVE-2019-3467EPSS 0.5%

    Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user …

  28. 9.0CVE-2019-19915EPSS 0.9%

    The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=eps_redirect_save a…

  29. 5.5CVE-2019-19341EPSS 0.3%

    A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and know…

  30. 9.8CVE-2019-8256EPSS 4.0%

    ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation.

  31. 7.8CVE-2019-19882EPSS 0.5%

    shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --wit…

  32. 7.1CVE-2019-19315EPSS 0.6%

    NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\.\mailslot\nlsX86ccMailslot mailslot.

  33. 5.5CVE-2019-9464EPSS 0.4%

    In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's pe…

  34. 7.8CVE-2019-17388EPSS 0.6%

    Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

  35. 5.5CVE-2013-0326EPSS 0.4%

    OpenStack nova base images permissions are world readable

  36. 7.8CVE-2019-19522EPSS 0.5%

    OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var…

  37. 7.8CVE-2019-19382EPSS 0.5%

    Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation.

  38. 5.5CVE-2019-5212EPSS 0.5%

    There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishi…

  39. 5.3CVE-2011-2515EPSS 0.4%

    PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.

  40. 3.3CVE-2012-6655EPSS 0.4%

    An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

  41. 7.8CVE-2019-14812EPSS 2.5%

    A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file co…

  42. 5.3CVE-2019-18456EPSS 0.9%

    An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by Elasticsearch integration.. It has Insecure Permissions (issue 1 of 4).

  43. 4.3CVE-2019-18453EPSS 0.6%

    An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions.

  44. 5.3CVE-2019-18452EPSS 0.9%

    An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions.

  45. 4.3CVE-2019-18450EPSS 0.8%

    An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions.

  46. 4.3CVE-2019-18449EPSS 0.7%

    An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions (issue 2 of 2).

  47. 4.3CVE-2019-18447EPSS 0.7%

    An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions.

  48. 4.3CVE-2019-18446EPSS 0.6%

    An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions (issue 1 of 2).

  49. 5.3CVE-2019-18459EPSS 0.9%

    An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions (issue 3 of 4).

  50. 4.3CVE-2019-18463EPSS 0.7%

    An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 4 of 4).