Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

CVEs (1,817)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-0883 1Nextcloud 1Nextcloud Server May 13, 2026 Apr 5, 2017 N/A· v4 6.4 MEDIUM· v3 5.5 MEDIUM· v2 Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared fil...Show more Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.Show less
CVE-2017-6338 1Trendmicro 1Interscan Web Security Virtual Appliance May 13, 2026 Apr 5, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Acc...Show more Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.Show less
CVE-2017-7307 1Riverbed 1Rios May 13, 2026 Apr 4, 2017 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/t...Show more Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.Show less
CVE-2017-5199 1Solarwinds 1Log And Event Manager May 13, 2026 Mar 24, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
CVE-2017-6950 1Sap 1Gui For Windows May 13, 2026 Mar 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions and execute arbitrary code via a crafted ABAP code, aka SAP Security Note 2407616.
CVE-2017-7199 1Tenable 1Nessus May 13, 2026 Mar 23, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue.
CVE-2017-6356 1Paloaltonetworks 1Terminal Services Agent May 13, 2026 Mar 20, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.
CVE-2017-2290 1Puppet 1Mcollective Puppet Agent May 13, 2026 Mar 3, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet...Show more On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet Enterprise users are not affected. This is resolved in mcollective-puppet-agent 1.12.1.Show less
CVE-2017-6104 1Zen Mobile App Native Project 1Zen Mobile App Native May 13, 2026 Mar 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
CVE-2017-0317 1Nvidia 1Gpu Driver May 13, 2026 Feb 15, 2017 N/A· v4 7.5 HIGH· v3 6.9 MEDIUM· v2 All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted...Show more All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.Show less
CVE-2017-0311 1Nvidia 1Gpu Driver May 13, 2026 Feb 15, 2017 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges.
CVE-2017-0423 1Google 1Android May 13, 2026 Feb 8, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vul...Show more An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586.Show less
CVE-2013-0887 1Google 1Chrome Apr 29, 2026 Feb 23, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unsp...Show more The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.Show less
CVE-2013-0885 2Google Opensuse 2Chrome Opensuse Apr 29, 2026 Feb 23, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack...Show more Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.Show less
CVE-2011-4339 1Ipmitool Project 1Ipmitool Apr 29, 2026 Dec 15, 2011 N/A· v4 N/A· v3 3.6 LOW· v2 ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID...Show more ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.Show less
CVE-2010-2116 1Mcafee 2Email Gateway Secure Mail Apr 29, 2026 May 28, 2010 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request t...Show more The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.Show less
CVE-2010-0488 1Microsoft 7Internet Explorer Windows 2000Windows 2003 Server+4 more Apr 29, 2026 Mar 31, 2010 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...Show more Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."Show less
CVE-2009-3897 1Dovecot 1Dovecot Apr 23, 2026 Nov 24, 2009 N/A· v4 5.5 MEDIUM· v3 4.6 MEDIUM· v2 Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent...Show more Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.Show less
CVE-2009-3939 7Avaya CanonicalDebian+4 more 18Aura Application Enablement Services Aura Communication ManagerAura Session Manager+15 more Apr 23, 2026 Nov 16, 2009 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
CVE-2009-3611 2Fedoraproject Le Web 2Backintime Fedora Apr 23, 2026 Oct 26, 2009 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading the...Show more common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.Show less

Previous 1...87 88 899091 Next