CWE-276 - Incorrect Default Permissions

Description

The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. The weakness is introduced during Architecture and Design, Implementation, Installation, Operation stages.

Latest vulnerabilities for CWE-276

Multiple vulnerabilities in DELL Secure Connect Gateway Security 2022-07-28
Critical Yes
Privilege escalation in Checkmk 2022-07-21
Low Yes
Insecure permissions in CheckMK 2022-07-21
Low Yes
Multiple vulnerabilities in Red Hat OpenStack 16.2 2022-07-21
High Yes
Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration 2022-07-12
Critical Yes
Incorrect default permissions in CreateRedirect extension for MediaWiki 2022-07-11
Medium Yes
Multiple vulnerabilities in LDAP Account Manager 2022-07-07
Medium Yes
Multiple vulnerabilities in Fortinet FortiManager and FortiAnalyzer 2022-07-05
Medium Yes
Multiple vulnerabilities in cPanel EasyApache 2022-06-29
Medium Yes
Multiple vulnerabilities in ABB e-Design 2022-06-29
Low Yes

References

Description of CWE-276 on Mitre website