cve.bz

CWE-732: Incorrect Permission Assignment for Critical Resource, page 28

Filter

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

What the weakness is: CWE-732 at MITRE

Ask an AI about CWE-732

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-732: Incorrect Permission Assignment for Critical Resource and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/732.html and https://cve.bz/cve/cwe/732?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2015-9456EPSS 1.4%

    The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1…

  2. 7.8CVE-2019-17051EPSS 1.6%

    Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.

  3. 7.8CVE-2019-9378EPSS 0.1%

    In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e…

  4. 5.3CVE-2019-12245EPSS 1.4%

    SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension.

  5. 7.8CVE-2019-13356EPSS 0.4%

    In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\bd\TDUpdate2\ used by AMRT.exe allows local attackers to hijack bdcore.dll, which leads to privilege escalation when…

  6. 7.8CVE-2019-13355EPSS 0.4%

    In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by ccschedulersvc.exe allows local attackers to hijack dotnetproxy.exe, which leads to privilege escalation wh…

  7. 8.8CVE-2019-9008EPSS 2.1%

    An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.

  8. 5.4CVE-2019-15721EPSS 0.8%

    An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainers to view and edit group runner settings.

  9. 6.7CVE-2019-11166EPSS 0.3%

    Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack.

  10. 4.7CVE-2019-16354EPSS 0.2%

    The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.

  11. 7.5CVE-2019-16187EPSS 1.4%

    Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script.

  12. 7.8CVE-2018-18630EPSS 0.3%

    A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.

  13. 7.8CVE-2019-12645EPSS 0.3%

    A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability i…

  14. 4.3CVE-2019-12635EPSS 1.0%

    A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected sof…

  15. 4.2CVE-2019-2389EPSS 0.3%

    Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue …

  16. 7.8CVE-2019-15752KEVExploitEPSS 49%

    Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an…

  17. 7.0CVE-2019-15316EPSS 0.4%

    Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.

  18. 7.8CVE-2019-15315EPSS 0.4%

    Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019…

  19. 3.3CVE-2019-11806EPSS 0.4%

    OX App Suite 7.10.1 and earlier has Insecure Permissions.

  20. 7.8CVE-2019-13069ExploitEPSS 1.2%

    extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH…

  21. 9.8CVE-2019-7958EPSS 4.4%

    Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lead to privilege escalation.

  22. 5.5CVE-2019-15119EPSS 1.0%

    lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

  23. 7.8CVE-2019-15084ExploitEPSS 0.9%

    Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM.

  24. 6.5CVE-2018-12357EPSS 0.8%

    Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions.

  25. 8.8CVE-2019-0341EPSS 1.1%

    The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If an attacker runs script code in the context of the application, he could get access to the session cookie. The session cookie could then be ab…

  26. 7.8CVE-2019-12808EPSS 0.4%

    ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execut…

  27. 7.8CVE-2019-14969EPSS 0.5%

    Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService (which writes to that directory) does not perform proper i…

  28. 7.8CVE-2019-14935EPSS 0.4%

    3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link.

  29. 7.3CVE-2019-1944EPSS 0.3%

    Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is …

  30. 6.6CVE-2019-14743EPSS 0.6%

    In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.

  31. 7.5CVE-2019-11270EPSS 1.1%

    Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients wi…

  32. 3.3CVE-2018-20936EPSS 0.3%

    cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).

  33. 7.1CVE-2018-20909EPSS 0.3%

    cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).

  34. 5.5CVE-2018-20908EPSS 0.3%

    cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).

  35. 4.3CVE-2018-20907EPSS 0.6%

    cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).

  36. 4.3CVE-2018-20906EPSS 0.6%

    cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).

  37. 5.4CVE-2018-20905EPSS 0.6%

    cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).

  38. 4.3CVE-2018-20904EPSS 0.6%

    cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).

  39. 9.8CVE-2018-20871EPSS 2.2%

    In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).

  40. 3.3CVE-2019-14395EPSS 0.3%

    cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).

  41. 8.1CVE-2018-2024EPSS 0.7%

    IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350.

  42. 9.8CVE-2019-1010101EPSS 3.4%

    Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The …

  43. 5.5CVE-2019-5222EPSS 0.6%

    There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker trick…

  44. 7.3CVE-2019-12876EPSS 4.6%

    Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.

  45. 9.8CVE-2019-1010009EPSS 2.8%

    DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote Execution, Credential Leaks. The component is: IoT API. The attack vector is: Any Accessible Server.

  46. 7.8CVE-2019-12577EPSS 0.6%

    A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The macOS binary openvpn_launcher.64 is setuid ro…

  47. 5.5CVE-2019-13142EPSS 0.3%

    The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder all…

  48. 7.3CVE-2019-13208EPSS 0.4%

    WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0.

  49. 6.5CVE-2018-14862EPSS 0.8%

    Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.

  50. 6.5CVE-2018-14861EPSS 1.0%

    Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.