Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CVEs (1,555)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-34352 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Sep 6, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user accoun...Show more A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.Show less
CVE-2023-2737 1Thalesgroup 1Safenet Authentication Service Jun 17, 2026 Aug 16, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.
CVE-2023-32492 1Dell 1Powerscale Onefs Jun 17, 2026 Aug 16, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to information disclosure or allowing to modif...Show more Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to information disclosure or allowing to modify files. Show less
CVE-2023-32663 1Intel 1Realsense Software Development Kit Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-32547 1Topconpositioning 1Mavinci Desktop Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-32543 1Intel 1Intelligent Test System Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-31246 1Intel 1Server Debug And Provisioning Tool Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-27505 1Intel 1Advanced Link Analyzer Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local ac...Show more Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
CVE-2023-27392 1Intel 1Support Jun 17, 2026 Aug 11, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access.
CVE-2022-43702 1Arm 6Arm Compiler Arm Compiler For Embedded FusaArm Compiler For Functional Safety+3 more Jun 17, 2026 Jul 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
CVE-2022-43701 1Arm 11Arm Compiler Arm Compiler For Embedded FusaArm Compiler For Functional Safety+8 more Jun 17, 2026 Jul 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
CVE-2023-33745 1Teleadapt 1Roomcast Ta 2400 Firmware Jun 17, 2026 Jul 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a passwo...Show more TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password).Show less
CVE-2023-38410 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 Jul 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to elevate privileges.
CVE-2023-3323 1Abb 1Zenon Jun 17, 2026 Jul 24, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exp...Show more A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404. Show less
CVE-2023-26077 1Atera 1Atera Jun 17, 2026 Jul 24, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.
CVE-2023-38335 1Omnis 1Studio Jun 17, 2026 Jul 20, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always p...Show more Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassing specific checks. This violates the expected behavior of an "irreversible operation".Show less
CVE-2023-38334 1Omnis 1Studio Jun 17, 2026 Jul 20, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or p...Show more Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis libraries can be unlocked, and thus further analyzed and modified by Omnis Studio. This allows for further analyzing and also deleting, viewing, changing, copying, renaming, duplicating, or printing previously locked Omnis classes. This violates the expected behavior of an "irreversible operation."Show less
CVE-2023-31462 1Steelseries 1Gg Jun 17, 2026 Jul 20, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
CVE-2020-36695 1Hitachi 5Compute Systems Manager Device ManagerReplication Manager+2 more Jun 17, 2026 Jul 18, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on L...Show more Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08. Show less
CVE-2023-29131 1Siemens 2Simatic Cn 4100 Simatic Cn 4100 Firmware Jun 17, 2026 Jul 11, 2023 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.

Previous 1...353637...78 Next