CWE-276— Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.— MITRE CWE catalog
1,721 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-276page 31 of 35
- CVE-2019-1982MEDIUMCVSS 5.3EG 5.32019-11-05
A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker t…
- CVE-2019-18369MEDIUMCVSS 5.3EG 5.32019-10-31
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
- CVE-2019-18367MEDIUMCVSS 5.3EG 5.32019-10-31
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.
- CVE-2019-18366MEDIUMCVSS 5.3EG 5.32019-10-31
In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.
- CVE-2019-14995MEDIUMCVSS 5.3EG 5.32019-09-11
The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.
- CVE-2018-12160MEDIUMCVSS 5.3EG 5.32018-09-12
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.
- CVE-2017-1000089MEDIUMCVSS 5.3EG 5.32017-10-05
Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as a…
- CVE-2021-44751MEDIUMCVSS 4.3EG 5.32022-03-25
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to sen…
- CVE-2022-2270MEDIUMCVSS 3.5EG 5.32022-07-01
An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab was leaking Conan packages names due to i…
- CVE-2024-10183MEDIUMCVSS 5.2EG 5.22024-10-22
A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems.
- CVE-2025-22425MEDIUMCVSS 5.1EG 5.12025-09-04
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for expl…
- CVE-2025-46586MEDIUMCVSS 5.1EG 5.12025-05-06
Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-52783MEDIUMCVSS 5.1EG 5.12025-01-15
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file.
- CVE-2024-34648MEDIUMCVSS 5.1EG 5.12024-09-04
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.
- CVE-2024-34616MEDIUMCVSS 5.1EG 5.12024-08-07
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data.
- CVE-2024-2819MEDIUMCVSS 5.1EG 5.12024-07-02
Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue affects Hitachi Ops Center Common Services: before 11.0.2-00.
- CVE-2024-20841MEDIUMCVSS 5.1EG 5.12024-03-05
Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.
- CVE-2019-3688MEDIUMCVSS 5.1EG 5.12019-10-07
The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This all…
- CVE-2019-3689MEDIUMCVSS 5.1EG 5.12019-09-19
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This…
- CVE-2026-28717MEDIUMCVSS 5.0EG 5.02026-03-06
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
- CVE-2025-46803MEDIUMCVSS 5.0EG 5.02025-05-26
The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.
- CVE-2024-58049MEDIUMCVSS 5.0EG 5.02025-03-04
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58047MEDIUMCVSS 5.0EG 5.02025-03-04
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-24788MEDIUMCVSS 5.0EG 5.02025-01-29
snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET in which files downloaded from stages are temporarily placed in a world-readable local dir…
- CVE-2024-39544MEDIUMCVSS 5.0EG 5.02024-10-11
An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files, representing an exposure of sensitive infor…
- CVE-2024-21615MEDIUMCVSS 5.0EG 5.02024-04-12
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential information on the system. On all Junos OS and Junos OS Evolved platforms, whe…
- CVE-2021-3722MEDIUMCVSS 5.0EG 5.02022-04-22
A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.
- CVE-2021-32006MEDIUMCVSS 5.0EG 5.02022-03-10
This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup fi…
- CVE-2011-4361MEDIUMCVSS v2 5.0EG 5.02012-01-08
MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) le…
- CVE-2011-1435MEDIUMCVSS v2 5.0EG 5.02011-05-03
Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension.
- CVE-2023-45690MEDIUMCVSS 4.9EG 4.92023-10-16
Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem
- CVE-2020-24402MEDIUMCVSS 4.9EG 4.92020-11-09
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to …
- CVE-2018-9085MEDIUMCVSS 4.9EG 4.92018-11-16
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platfo…
- CVE-2025-15523MEDIUMCVSS 4.8EG 4.82026-01-22
MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interprete…
- CVE-2025-9190MEDIUMCVSS 4.8EG 4.82025-08-26
The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC (Transparency, Consent, and Control) permissions. Acquire…
- CVE-2025-53813MEDIUMCVSS 4.8EG 4.82025-08-26
The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Transparency, Consent, and Control) permissions. Acquire…
- CVE-2025-53811MEDIUMCVSS 4.8EG 4.82025-08-26
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. A…
- CVE-2025-5963MEDIUMCVSS 4.8EG 4.82025-06-20
The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library (Dylib) injection. …
- CVE-2025-5255MEDIUMCVSS 4.8EG 4.82025-06-20
The Phoenix Code's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library (Dylib) inject…
- CVE-2025-4081MEDIUMCVSS 4.8EG 4.82025-05-29
Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one. A local attacker with unprivileged access can execute the app…
- CVE-2025-4412MEDIUMCVSS 4.8EG 4.82025-05-27
On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Transparency, Consent, and Control) identity. The acquired …
- CVE-2025-4280MEDIUMCVSS 4.8EG 4.82025-05-22
MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter…
- CVE-2024-26302MEDIUMCVSS 4.8EG 4.82024-02-27
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve informat…
- CVE-2022-3466MEDIUMCVSS 4.8EG 4.82023-09-15
The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022…
- CVE-2020-5231MEDIUMCVSS 4.8EG 4.82020-01-30
In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither i…
- CVE-2025-52640MEDIUMCVSS 4.7EG 4.72026-08-13
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scop…
- CVE-2024-26280MEDIUMCVSS 4.7EG 4.72024-03-01
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2.8.2 and newer, Ops…
- CVE-2021-24032MEDIUMCVSS 4.7EG 4.72021-03-04
Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files co…
- CVE-2024-40514MEDIUMCVSS 4.6EG 4.62025-01-16
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions.
- CVE-2022-20465MEDIUMCVSS 4.6EG 4.62022-11-08
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution pr…
Map vulnerabilities like CWE-276 to your infrastructure
EchelonGraph correlates every CVE — across CWE-276 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →