CWE-276 - Incorrect Default Permissions

Description

The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. The weakness is introduced during Architecture and Design, Implementation, Installation, Operation stages.

Latest vulnerabilities for CWE-276

Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 2024-04-15
High Yes
Incorrect default permissions in Junos OS Evolved and Juniper Junos OS 2024-04-11
Low Yes
Multiple vulnerabilities in Netcool Operations Insight 2024-04-03
High Yes
Multiple vulnerabilities in IBM Secure Proxy 2024-03-22
Critical Yes
Incorrect default permissions in Intel ACAT Software 2024-03-18
Low Yes
Incorrect default permissions in IBM Operations Analytics - Log Analysis 2024-03-18
Low Yes
Multiple vulnerabilities in Intel Converged Security Management Engine (CSME) installer 2024-03-13
Low Yes
Incorrect default permissions in IBM Observability with Instana 2024-03-08
Low Yes
Multiple vulnerabilities in Foxit PDF Reader and Editor for Windows 2024-03-08
High Yes
Multiple vulnerabilities in IBM QRadar Suite Software 2024-03-04
High Yes

References

Description of CWE-276 on Mitre website