Vulnerabilities > Incorrect Default Permissions

DATE CVE VULNERABILITY TITLE RISK
2020-08-26 CVE-2020-3485 Incorrect Default Permissions vulnerability in Cisco Vision Dynamic Signage Director 6.2.0
A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform.
network
low complexity
cisco CWE-276
6.3
2020-08-26 CVE-2020-3484 Incorrect Default Permissions vulnerability in Cisco Vision Dynamic Signage Director 6.2(0)
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device.
network
low complexity
cisco CWE-276
5.3
2020-08-26 CVE-2020-3152 Incorrect Default Permissions vulnerability in Cisco Connected Mobile Experiences 10.6.0/10.6.1/10.6.2
A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to execute arbitrary commands with root privileges.
local
low complexity
cisco CWE-276
6.7
2020-08-25 CVE-2020-7824 Incorrect Default Permissions vulnerability in Ericssonlg Ipecs
A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission.
network
low complexity
ericssonlg CWE-276
6.5
2020-08-13 CVE-2020-8763 Incorrect Default Permissions vulnerability in Intel products
Improper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for Windows* 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2020-08-13 CVE-2020-8743 Incorrect Default Permissions vulnerability in Intel Mailbox Interface Driver
Improper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2020-08-13 CVE-2020-12287 Incorrect Default Permissions vulnerability in Intel Distribution of Openvino Toolkit
Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2020-08-08 CVE-2020-15821 Incorrect Default Permissions vulnerability in Jetbrains Youtrack
In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft.
network
low complexity
jetbrains CWE-276
6.5
2020-07-30 CVE-2020-8219 Incorrect Default Permissions vulnerability in multiple products
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.
network
low complexity
pulsesecure ivanti CWE-276
7.2
2020-07-29 CVE-2020-2077 Incorrect Default Permissions vulnerability in Sick Package Analytics 04.0.0
SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings.
network
low complexity
sick CWE-276
7.5