Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CVEs (1,555)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-23253 1Apple 1Macos Jun 17, 2026 Mar 8, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library.
CVE-2024-23201 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Mar 8, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able...Show more A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service.Show less
CVE-2024-22889 1Plone 1Plone Jun 17, 2026 Mar 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.
CVE-2024-20841 1Samsung 1Account Jun 17, 2026 Mar 5, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.
CVE-2024-20830 1Samsung 1Android Jun 17, 2026 Mar 5, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings.
CVE-2024-20005 1Google 1Android Jun 17, 2026 Mar 4, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.Show less
CVE-2024-26280 1Apache 1Airflow Jun 17, 2026 Mar 1, 2024 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2....Show more Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2.8.2 and newer, Ops and Viewer users do not have audit log permission by default, they need to be explicitly granted permissions to see the logs. Only admin users have audit log permission by default. Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerabilityShow less
CVE-2023-49338 1Couchbase 1Couchbase Server Jun 17, 2026 Feb 28, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.
CVE-2024-26302 1Arubanetworks 1Clearpass Policy Manager Jun 17, 2026 Feb 27, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker t...Show more A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager. Show less
CVE-2023-48678 1Acronis 1Cyber Protect Jun 17, 2026 Feb 27, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-50975 1Td 1Advanced Dashboard Jun 17, 2026 Feb 21, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This mak...Show more The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised process to access banking information.Show less
CVE-2023-7235 1Openvpn 1Openvpn Gui Jun 17, 2026 Feb 21, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to...Show more The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.Show less
CVE-2023-42953 1Apple 5Ipad Os Iphone OsMacos+2 more Jun 17, 2026 Feb 21, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
CVE-2023-42945 1Apple 1Macos Jun 17, 2026 Feb 21, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may gain unauthorized access to Bluetooth.
CVE-2023-42928 1Apple 2Ipad Os Iphone Os Jun 17, 2026 Feb 21, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be able to gain elevated privileges.
CVE-2024-1156 1Emerson 8Data Record Ad FlexloggerG Web Development Software+5 more Jun 17, 2026 Feb 20, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.
CVE-2024-1155 1Emerson 8Data Record Ad FlexloggerG Web Development Software+5 more Jun 17, 2026 Feb 20, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-25605 1Liferay 2Digital Experience Platform Liferay Portal Jun 17, 2026 Feb 20, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users vie...Show more The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates by default, which allows remote attackers to view any template via the UI or API.Show less
CVE-2023-52379 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 18, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52362 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 18, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

Previous 1...303132...78 Next