Vulnerabilities > Incorrect Permission Assignment for Critical Resource

DATE CVE VULNERABILITY TITLE RISK
2019-02-22 CVE-2019-7729 Incorrect Permission Assignment for Critical Resource vulnerability in Bosch Smart Camera
An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android.
local
low complexity
bosch CWE-732
2.1
2019-02-19 CVE-2018-9867 Incorrect Permission Assignment for Critical Resource vulnerability in Sonicwall Sonicos and Sonicosv
In SonicWall SonicOS, administrators without full permissions can download imported certificates.
local
low complexity
sonicwall CWE-732
2.1
2019-02-18 CVE-2019-0111 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Data Center Manager
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-732
2.1
2019-02-18 CVE-2019-0108 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Data Center Manager
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access.
local
low complexity
intel CWE-732
2.1
2019-01-22 CVE-2018-13374 Incorrect Permission Assignment for Critical Resource vulnerability in Fortinet Fortios
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
network
low complexity
fortinet CWE-732
4.0
2019-01-16 CVE-2018-18812 Incorrect Permission Assignment for Critical Resource vulnerability in Tibco products
The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when the Spotfire Library is configured to use external storage.
network
tibco CWE-732
3.5
2019-01-10 CVE-2018-5413 Incorrect Permission Assignment for Critical Resource vulnerability in Imperva Securesphere 11.5/12.0/13.0
Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
network
low complexity
imperva CWE-732
6.5
2019-01-10 CVE-2018-3703 Incorrect Permission Assignment for Critical Resource vulnerability in Intel SSD Data Center Tool
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
local
low complexity
intel microsoft CWE-732
4.6
2019-01-10 CVE-2018-18098 Incorrect Permission Assignment for Critical Resource vulnerability in Intel SGX Platform Software and SGX SDK
Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.
4.4
2019-01-10 CVE-2018-12177 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Proset/Wireless Software
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-732
4.6