← Back
CWE-276

1,555 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

JSON object

Loading...

CVEs (1,555)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-27593
1Cilium
1Cilium
Jun 17, 2026
Mar 17, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a...Show more
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a `hostPath` mount of that directory in the agent pod. By replacing the CNI binary with their own malicious binary and waiting for the creation of a new pod on the node, the attacker can gain access to the underlying node. The issue has been fixed and the fix is available on versions 1.11.15, 1.12.8, and 1.13.1. Some workarounds are available. Kubernetes RBAC should be used to deny users and service accounts `exec` access to Cilium agent pods. In cases where a user requires `exec` access to Cilium agent pods, but should not have access to the underlying node, no workaround is possible.Show less
CVE-2022-46774
1Ibm
1Manage Application
Jun 17, 2026
Mar 15, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID:...Show more
IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.Show less
CVE-2022-3758
1Gitlab
1Gitlab
Jun 17, 2026
Mar 9, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Due to improper permissions ch...Show more
An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Due to improper permissions checks an unauthorised user was able to read, add or edit a users private snippet.Show less
CVE-2023-1229
1Google
1Chrome
Jun 17, 2026
Mar 7, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2021-36400
1Moodle
1Moodle
Jun 17, 2026
Mar 6, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
CVE-2021-36397
1Moodle
1Moodle
Jun 17, 2026
Mar 6, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Moodle, insufficient capability checks meant message deletions were not limited to the current user.
CVE-2022-45552
1Zbt
1We1626 Firmware
Jul 9, 2026
Mar 3, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to obtain sensitive information via SPI bus interface connected to pinout of the NAND flash memory.
CVE-2023-25540
1Dell
1Emc Powerscale Onefs
Jun 17, 2026
Feb 28, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability to overwrite arbitrary files causing denial of service.
CVE-2022-3884
1Hitachi
1Ops Center Analyzer
Jun 17, 2026
Feb 28, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops...Show more
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01. Show less
CVE-2020-36652
1Hitachi
5Automation Director
Infrastructure Analytics AdvisorOps Center Analyzer+2 more
Jun 17, 2026
Feb 28, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitach...Show more
Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Automation Director: from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00. Show less
CVE-2022-40232
1Ibm
1Sterling B2b Integrator
Jun 17, 2026
Feb 17, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID:...Show more
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597. Show less
CVE-2021-34182
1Ttyd Project
1Ttyd
Jun 17, 2026
Feb 17, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions.
CVE-2021-34164
1Lizhifaka Project
1Lizhifaka
Jun 17, 2026
Feb 17, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location.
CVE-2022-36397
1Intel
1Quickassist Technology
Jun 17, 2026
Feb 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33196
1Intel
136Xeon D 1513n Firmware
Xeon D 1518 FirmwareXeon D 1520 Firmware+133 more
Jun 17, 2026
Feb 16, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation...Show more
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.Show less
CVE-2023-23850
1Jenkins
1Synopsys Coverity
Jun 17, 2026
Feb 15, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2023-23848
1Jenkins
1Synopsys Coverity
Jun 17, 2026
Feb 15, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtain...Show more
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.Show less
CVE-2022-45153
2Opensuse
Suse
3Leap
Linux Enterprise Module For Sap ApplicationsLinux Enterprise Server
Jun 17, 2026
Feb 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attacke...Show more
An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.Show less
CVE-2023-22931
1Splunk
2Splunk
Splunk Cloud Platform
Jun 17, 2026
Feb 14, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been...Show more
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.Show less
CVE-2022-45454
1Acronis
2Agent
Cyber Protect
Jun 17, 2026
Feb 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.