CWE-732 · Incorrect Permission Assignment for Critical Resource (page 11)
Page 11 of 18 — CVEs classified under CWE-732, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11831 | Critical | 9.8 | 2020-11-19 | OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1. |
CVE-2020-28914 | High | 7.1 | 2020-11-17 | An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or direc… |
CVE-2020-24525 | High | 7.8 | 2020-11-12 | Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2019-11121 | High | 7.8 | 2020-11-12 | Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable… |
CVE-2020-16990 | Medium | 6.2 | 2020-11-11 | Azure Sphere Information Disclosure Vulnerability |
CVE-2020-24367 | High | 7.8 | 2020-11-10 | Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by… |
CVE-2020-28055 | High | 7.8 | 2020-11-10 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a… |
CVE-2020-3595 | High | 7.8 | 2020-11-06 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. T… |
CVE-2020-17490 | Medium | 5.5 | 2020-11-06 | The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. |
CVE-2020-15708 | Critical | 9.3 | 2020-11-06 | Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary fi… |
CVE-2020-27992 | High | 7.8 | 2020-11-02 | Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstalle… |
CVE-2020-27658 | High | 7.1 | 2020-10-29 | Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for rem… |
CVE-2020-26133 | High | 7.8 | 2020-10-28 | An issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in the default installation directory, an attacker can elevate pr… |
CVE-2020-26132 | High | 7.8 | 2020-10-28 | An issue was discovered in Home DNS Server 0.10. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privile… |
CVE-2020-26131 | High | 7.8 | 2020-10-28 | Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. Due to insufficient access restrictions in the default ins… |
CVE-2020-26130 | High | 7.8 | 2020-10-28 | Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default ins… |
CVE-2020-10140 | High | 7.8 | 2020-10-21 | Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramD… |
CVE-2020-15910 | Medium | 4.7 | 2020-10-19 | SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascrip… |
CVE-2020-0410 | Medium | 5.5 | 2020-10-14 | In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with… |
CVE-2020-17415 | High | 7.8 | 2020-10-13 | This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the… |
CVE-2020-17414 | High | 7.8 | 2020-10-13 | This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the abil… |
CVE-2020-15250 | Medium | 4.4 | 2020-10-12 | In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the sy… |
CVE-2020-26932 | Medium | 4.3 | 2020-10-10 | debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode… |
CVE-2020-15838 | High | 8.8 | 2020-10-09 | The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions. |
CVE-2020-9048 | High | 7.1 | 2020-10-08 | A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker… |
CVE-2020-12302 | High | 7.8 | 2020-10-05 | Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2020-26106 | High | 7.5 | 2020-09-25 | cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). |
CVE-2020-17365 | High | 7.8 | 2020-09-24 | Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable esca… |
CVE-2020-3503 | Medium | 6.0 | 2020-09-24 | A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to obtain read and write access to critica… |
CVE-2020-12842 | Critical | 9.8 | 2020-09-24 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. |
CVE-2020-12839 | Critical | 9.8 | 2020-09-24 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. |
CVE-2020-12838 | Critical | 9.8 | 2020-09-24 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. |
CVE-2020-25826 | High | 7.8 | 2020-09-23 | PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe. |
CVE-2020-16202 | High | 7.8 | 2020-09-22 | WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code execution with system… |
CVE-2020-11855 | High | 7.8 | 2020-09-22 | An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attack… |
CVE-2020-15776 | High | 8.8 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An a… |
CVE-2020-1694 | Medium | 4.9 | 2020-09-16 | A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users… |
CVE-2014-10402 | Medium | 6.1 | 2020-09-16 | An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_… |
CVE-2020-10781 | Medium | 5.5 | 2020-09-16 | A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-co… |
CVE-2014-10401 | Medium | 6.1 | 2020-09-11 | An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_d… |
CVE-2020-7314 | High | 8.2 | 2020-09-10 | Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6… |
CVE-2018-17766 | Medium | 4.6 | 2020-09-09 | Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2020-23834 | High | 8.8 | 2020-09-04 | Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing t… |
CVE-2020-5369 | High | 8.8 | 2020-09-02 | Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated mal… |
CVE-2020-24355 | Critical | 9.8 | 2020-09-02 | Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular an… |
CVE-2020-17402 | Medium | 6.5 | 2020-08-25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270). An attacker must fir… |
CVE-2020-5417 | High | 8.8 | 2020-08-21 | Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the… |
CVE-2020-24394 | High | 7.1 | 2020-08-19 | In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL suppo… |
CVE-2020-5385 | Medium | 6.7 | 2020-08-18 | Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomp… |
CVE-2020-0559 | High | 7.8 | 2020-08-13 | Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to… |
CVE-2020-8731 | High | 8.8 | 2020-08-13 | Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a… |
CVE-2020-6295 | High | 7.8 | 2020-08-12 | Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information throug… |
CVE-2020-4631 | Medium | 5.5 | 2020-08-04 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permis… |
CVE-2019-19455 | High | 7.8 | 2020-08-03 | Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine /… |
CVE-2020-13915 | High | 7.5 | 2020-07-28 | Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthen… |
CVE-2014-1422 | Medium | 5.0 | 2020-07-22 | In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will… |
CVE-2020-9671 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privil… |
CVE-2020-15697 | Medium | 4.3 | 2020-07-15 | An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users. |
CVE-2020-11827 | High | 7.8 | 2020-07-14 | In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a… |
CVE-2020-6267 | Medium | 5.4 | 2020-07-14 | Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag. |
CVE-2020-5371 | High | 8.0 | 2020-07-06 | Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or l… |
CVE-2020-15529 | High | 7.8 | 2020-07-05 | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operati… |
CVE-2020-15528 | High | 7.8 | 2020-07-05 | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file pe… |
CVE-2020-15397 | High | 7.8 | 2020-06-30 | HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/sp… |
CVE-2020-12041 | Critical | 9.4 | 2020-06-29 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits… |
CVE-2017-18916 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction. |
CVE-2016-11080 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details. |
CVE-2016-11077 | Low | 2.7 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of… |
CVE-2016-11065 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.3.0. An attacker could use the WebSocket feature to send pop-up messages to users or change a post's appe… |
CVE-2016-11062 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed. |
CVE-2017-18910 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. E-mail notifications can have spoofed links. |
CVE-2017-18896 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to the logs via a REST API version 3 loggin… |
CVE-2017-18894 | High | 8.1 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. Sometimes. resource-owner authorizatio… |
CVE-2017-18886 | High | 8.8 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands. |
CVE-2017-18878 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session. |
CVE-2018-21256 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for group-message channel creation) via th… |
CVE-2018-21252 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based polic… |
CVE-2017-18872 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 se… |
CVE-2018-21265 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and n… |
CVE-2018-21261 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintend… |
CVE-2018-21255 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel. |
CVE-2018-21254 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-message channel creation) via the Message s… |
CVE-2018-21253 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted use… |
CVE-2017-18876 | Medium | 4.9 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of… |
CVE-2017-18875 | Medium | 4.9 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files. |
CVE-2017-18870 | Medium | 4.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case. |
CVE-2020-10782 | Medium | 6.5 | 2020-06-18 | An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable and expose… |
CVE-2020-11911 | Medium | 5.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control. |
CVE-2020-13431 | High | 7.8 | 2020-06-16 | I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory. |
CVE-2020-5358 | Medium | 6.7 | 2020-06-15 | Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect per… |
CVE-2020-5755 | High | 7.8 | 2020-06-15 | Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to tr… |
CVE-2020-3961 | High | 7.8 | 2020-06-15 | VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of l… |
CVE-2020-11613 | High | 7.8 | 2020-06-11 | Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. B… |
CVE-2020-1170 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker w… |
CVE-2020-13866 | High | 7.8 | 2020-06-08 | WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a… |
CVE-2020-13912 | High | 7.3 | 2020-06-07 | SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain… |
CVE-2020-13386 | High | 7.3 | 2020-05-27 | In SmartDraw 2020 27.0.0.0, the installer gives inherited write permissions to the Authenticated Users group on the SmartDraw 2020 installation folder. Additio… |
CVE-2020-12431 | Medium | 6.6 | 2020-05-21 | A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe al… |
CVE-2020-12831 | Medium | 5.3 | 2020-05-13 | An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config f… |
CVE-2020-8153 | High | 8.1 | 2020-05-12 | Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name. |