CWE-276— Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.— MITRE CWE catalog

1,721 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-276page 27 of 35

CVE-2023-4065MEDIUMCVSS 5.5EG 5.5
2023-09-27
A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of…
CVE-2023-30902MEDIUMCVSS 5.5EG 5.5
2023-06-26
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affec…
CVE-2023-32407MEDIUMCVSS 5.5EG 5.5
2023-06-23
A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may …
CVE-2023-32404MEDIUMCVSS 5.5EG 5.5
2023-06-23
This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
CVE-2023-32399MEDIUMCVSS 5.5EG 5.5
2023-06-23
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.
CVE-2023-21104MEDIUMCVSS 5.5EG 5.5
2023-05-15
In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions…
CVE-2023-28192MEDIUMCVSS 5.5EG 5.5
2023-05-08
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
CVE-2022-3146MEDIUMCVSS 5.5EG 5.5
2023-03-23
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and …
CVE-2022-3101MEDIUMCVSS 5.5EG 5.5
2023-03-23
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and …
CVE-2022-47450MEDIUMCVSS 5.5EG 5.5
2023-02-12
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-20511MEDIUMCVSS 5.5EG 5.5
2022-12-16
In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl…
CVE-2022-20448MEDIUMCVSS 5.5EG 5.5
2022-11-08
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Use…
CVE-2013-4281MEDIUMCVSS 5.5EG 5.5
2022-10-19
In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file.
CVE-2021-46834MEDIUMCVSS 5.5EG 5.5
2022-09-20
A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4).
CVE-2021-3917MEDIUMCVSS 5.5EG 5.5
2022-08-23
A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest thr…
CVE-2022-27500MEDIUMCVSS 5.5EG 5.5
2022-08-18
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2021-44470MEDIUMCVSS 5.5EG 5.5
2022-08-18
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-20341MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of tethering interfaces with no additional execution privileges needed. User inter…
CVE-2022-20322MEDIUMCVSS 5.5EG 5.5
2022-08-12
In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo…
CVE-2022-20312MEDIUMCVSS 5.5EG 5.5
2022-08-12
In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is …
CVE-2022-20303MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed…
CVE-2022-20301MEDIUMCVSS 5.5EG 5.5
2022-08-12
In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for ex…
CVE-2022-20300MEDIUMCVSS 5.5EG 5.5
2022-08-12
In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
CVE-2022-20299MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not…
CVE-2022-20298MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
CVE-2022-20296MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
CVE-2022-20295MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
CVE-2022-20294MEDIUMCVSS 5.5EG 5.5
2022-08-12
In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed fo…
CVE-2022-20272MEDIUMCVSS 5.5EG 5.5
2022-08-12
In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is neede…
CVE-2022-20263MEDIUMCVSS 5.5EG 5.5
2022-08-12
In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed …
CVE-2022-20259MEDIUMCVSS 5.5EG 5.5
2022-08-12
In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Prod…
CVE-2021-0735MEDIUMCVSS 5.5EG 5.5
2022-08-11
In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional exec…
CVE-2022-20352MEDIUMCVSS 5.5EG 5.5
2022-08-10
In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additiona…
CVE-2022-22424MEDIUMCVSS 5.5EG 5.5
2022-07-20
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.
CVE-2022-25804MEDIUMCVSS 5.5EG 5.5
2022-06-09
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attac…
CVE-2022-30747MEDIUMCVSS 5.5EG 5.5
2022-06-07
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
CVE-2022-28218MEDIUMCVSS 5.5EG 5.5
2022-04-26
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication …
CVE-2022-26855MEDIUMCVSS 5.5EG 5.5
2022-04-08
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading to a denial of service.
CVE-2021-39779MEDIUMCVSS 5.5EG 5.5
2022-03-30
In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for explo…
CVE-2021-39770MEDIUMCVSS 5.5EG 5.5
2022-03-30
In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for …
CVE-2021-39769MEDIUMCVSS 5.5EG 5.5
2022-03-30
In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges neede…
CVE-2021-39748MEDIUMCVSS 5.5EG 5.5
2022-03-30
In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is n…
CVE-2021-39747MEDIUMCVSS 5.5EG 5.5
2022-03-30
In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is n…
CVE-2021-22571MEDIUMCVSS 5.5EG 5.5
2022-03-18
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.
CVE-2021-44216MEDIUMCVSS 5.5EG 5.5
2022-03-10
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
CVE-2021-44215MEDIUMCVSS 5.5EG 5.5
2022-03-10
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact.
CVE-2021-37103MEDIUMCVSS 5.5EG 5.5
2022-02-25
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2022-25327MEDIUMCVSS 5.5EG 5.5
2022-02-25
The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt met…
CVE-2021-33166MEDIUMCVSS 5.5EG 5.5
2022-02-09
Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21704MEDIUMCVSS 5.5EG 5.5
2022-01-19
log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensi…

Map vulnerabilities like CWE-276 to your infrastructure

EchelonGraph correlates every CVE — across CWE-276 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →