CWE-276 - Incorrect Default Permissions

Description

The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. The weakness is introduced during Architecture and Design, Implementation, Installation, Operation stages.

Latest vulnerabilities for CWE-276

Incorrect default permissions in Certain HPE Apollo, XL Servers 2023-03-17
Low Yes
Multiple vulnerabilities in Siemens RUGGEDCOM and SCALANCE Products 2023-03-17
High Yes
Incorrect default permissions in Certain HPE Edgeline Servers 2023-03-17
Low Yes
Multiple vulnerabilities in IBM CICS Transaction Gateway 2023-03-16
Medium Yes
Privilege escalation in Lenovo System Update 2023-03-15
Low Yes
Multiple vulnerabilities in IBM Security Guardium 2023-03-14
Medium Yes
Incorrect default permissions in Certain HPE ProLiant Servers 2023-03-10
Low Yes
Incorrect default permissions in Certain HPE StoreEasy Servers 2023-03-10
Low Yes
Incorrect default permissions in Certain HPE ProLiant DX Servers 2023-03-09
Low Yes
Multiple vulnerabilities in Jenkins and Jenkins LTS 2023-03-09
Medium Yes

References

Description of CWE-276 on Mitre website