Vulnerabilities > Incorrect Default Permissions

DATE CVE VULNERABILITY TITLE RISK
2019-11-14 CVE-2019-11154 Incorrect Default Permissions vulnerability in Intel Proset/Wireless Wifi
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
local
low complexity
intel CWE-276
3.6
2019-11-14 CVE-2012-1157 Incorrect Default Permissions vulnerability in multiple products
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
network
low complexity
moodle fedoraproject CWE-276
4.0
2019-11-14 CVE-2019-18895 Incorrect Default Permissions vulnerability in Scanguard Antivirus 20191112
Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.
local
low complexity
scanguard CWE-276
4.6
2019-11-13 CVE-2010-5108 Incorrect Default Permissions vulnerability in multiple products
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket.
network
low complexity
edgewall debian CWE-276
5.0
2019-11-12 CVE-2019-4652 Incorrect Default Permissions vulnerability in IBM Spectrum Protect Plus
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions.
local
low complexity
ibm CWE-276
3.6
2019-11-07 CVE-2013-1425 Incorrect Default Permissions vulnerability in multiple products
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
local
low complexity
ldap-git-backup-project debian CWE-276
5.5
2019-11-05 CVE-2019-1982 Incorrect Default Permissions vulnerability in Cisco products
A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections.
network
low complexity
cisco CWE-276
5.0
2019-11-01 CVE-2019-12752 Incorrect Default Permissions vulnerability in Symantec Sonar
The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system.
low complexity
symantec CWE-276
4.1
2019-10-31 CVE-2019-18369 Incorrect Default Permissions vulnerability in Jetbrains Youtrack
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
network
low complexity
jetbrains CWE-276
5.0
2019-10-31 CVE-2019-18367 Incorrect Default Permissions vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.
network
low complexity
jetbrains CWE-276
5.0