Vulnerabilities > Incorrect Default Permissions

DATE CVE VULNERABILITY TITLE RISK
2021-10-11 CVE-2021-29005 Incorrect Default Permissions vulnerability in Rconfig 3.9.6
Insecure permission of chmod command on rConfig server 3.9.6 exists.
network
low complexity
rconfig CWE-276
critical
9.0
2021-10-05 CVE-2021-39886 Incorrect Default Permissions vulnerability in Gitlab
Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references.
network
low complexity
gitlab CWE-276
4.0
2021-09-29 CVE-2021-33923 Incorrect Default Permissions vulnerability in Confluent Cp-Ansible
Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).
local
low complexity
confluent CWE-276
2.1
2021-09-28 CVE-2021-36363 Incorrect Default Permissions vulnerability in Nagios XI
Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.
network
low complexity
nagios CWE-276
7.5
2021-09-28 CVE-2021-36365 Incorrect Default Permissions vulnerability in Nagios XI
Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.
network
low complexity
nagios CWE-276
7.5
2021-09-21 CVE-2021-20037 Incorrect Default Permissions vulnerability in Sonicwall Global VPN Client 4.10.4.0314
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system.
local
low complexity
sonicwall CWE-276
7.2
2021-09-08 CVE-2021-1831 Incorrect Default Permissions vulnerability in Apple Ipados and Iphone OS
The issue was addressed with improved permissions logic.
network
apple CWE-276
4.3
2021-09-08 CVE-2021-1832 Incorrect Default Permissions vulnerability in Apple products
Copied files may not have the expected file permissions.
local
low complexity
apple CWE-276
5.5
2021-09-08 CVE-2021-30750 Incorrect Default Permissions vulnerability in Apple Macos
The issue was addressed with improved permissions logic.
network
apple CWE-276
4.3
2021-08-24 CVE-2021-30999 Incorrect Default Permissions vulnerability in Apple Iphone OS
The issue was addressed with improved permissions logic.
network
low complexity
apple CWE-276
4.3