CWE-281 - Improper preservation of permissions

Description

The software does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

Latest vulnerabilities for CWE-281

Multiple vulnerabilities in IBM Cloud Pak for Data 2024-09-13
Medium Yes
Security restrictions bypass in Zabbix Agent MSI Installer 2024-08-14
Low Yes
Multiple vulnerabilities in IBM Storage Ceph 2024-08-08
Medium Yes
Multiple vulnerabilities in Dell ObjectScale 2024-08-08
High Yes
Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data 2024-07-31
High Yes
Multiple vulnerabilities in IBM InfoSphere Information Server 2024-07-01
High Yes
Multiple vulnerabilities in IBM QRadar Suite software 2024-05-06
Medium Yes
Multiple vulnerabilities in IBM Sterling Order Management 2024-04-16
High Yes
Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data 2023-12-11
High Yes
Multiple vulnerabilities in Oracle Linux 2023-10-18
Critical Yes

References

Description of CWE-281 on Mitre website