CWE-276 - Incorrect Default Permissions

Description

The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. The weakness is introduced during Architecture and Design, Implementation, Installation, Operation stages.

Latest vulnerabilities for CWE-276

Incorrect default permissions in Mitsubishi Electric GX Works3 2023-09-27
Low No
Multiple vulnerabilities in Jenkins and Jenkins LTS 2023-09-21
Low Yes
Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps 2023-09-19
High Yes
Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data 2023-09-18
Low Yes
Multiple vulnerabilities in IBM Watson Machine Learning Accelerator 2023-09-15
Medium Yes
Multiple vulnerabilities in Red Hat AMQ Streams 2023-09-15
High Yes
Multiple vulnerabilities in IBM Cloud Pak for Business Automation 2023-09-15
High Yes
Multiple vulnerabilities in IBM Data Risk Manager 2023-09-14
High Yes
Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration 2023-09-12
High Yes
Incorrect default permissions in IBM Cloud APM 2023-09-12
Low Yes

References

Description of CWE-276 on Mitre website