CWE-276— Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.— MITRE CWE catalog
1,759 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-276page 28 of 36
- CVE-2022-20298MEDIUMCVSS 5.5EG 5.52022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
- CVE-2022-20296MEDIUMCVSS 5.5EG 5.52022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
- CVE-2022-20295MEDIUMCVSS 5.5EG 5.52022-08-12
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
- CVE-2022-20294MEDIUMCVSS 5.5EG 5.52022-08-12
In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed fo…
- CVE-2022-20272MEDIUMCVSS 5.5EG 5.52022-08-12
In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is neede…
- CVE-2022-20263MEDIUMCVSS 5.5EG 5.52022-08-12
In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed …
- CVE-2022-20259MEDIUMCVSS 5.5EG 5.52022-08-12
In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Prod…
- CVE-2021-0735MEDIUMCVSS 5.5EG 5.52022-08-11
In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional exec…
- CVE-2022-20352MEDIUMCVSS 5.5EG 5.52022-08-10
In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additiona…
- CVE-2022-22424MEDIUMCVSS 5.5EG 5.52022-07-20
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.
- CVE-2022-25804MEDIUMCVSS 5.5EG 5.52022-06-09
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attac…
- CVE-2022-30747MEDIUMCVSS 5.5EG 5.52022-06-07
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
- CVE-2022-28218MEDIUMCVSS 5.5EG 5.52022-04-26
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication …
- CVE-2022-26855MEDIUMCVSS 5.5EG 5.52022-04-08
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading to a denial of service.
- CVE-2021-39779MEDIUMCVSS 5.5EG 5.52022-03-30
In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2021-39770MEDIUMCVSS 5.5EG 5.52022-03-30
In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for …
- CVE-2021-39769MEDIUMCVSS 5.5EG 5.52022-03-30
In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges neede…
- CVE-2021-39748MEDIUMCVSS 5.5EG 5.52022-03-30
In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is n…
- CVE-2021-39747MEDIUMCVSS 5.5EG 5.52022-03-30
In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is n…
- CVE-2021-22571MEDIUMCVSS 5.5EG 5.52022-03-18
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.
- CVE-2021-44216MEDIUMCVSS 5.5EG 5.52022-03-10
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
- CVE-2021-44215MEDIUMCVSS 5.5EG 5.52022-03-10
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact.
- CVE-2021-37103MEDIUMCVSS 5.5EG 5.52022-02-25
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2022-25327MEDIUMCVSS 5.5EG 5.52022-02-25
The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt met…
- CVE-2021-33166MEDIUMCVSS 5.5EG 5.52022-02-09
Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access.
- CVE-2022-21704MEDIUMCVSS 5.5EG 5.52022-01-19
log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensi…
- CVE-2021-0979MEDIUMCVSS 5.5EG 5.52021-12-15
In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local informat…
- CVE-2021-0672MEDIUMCVSS 5.5EG 5.52021-11-18
In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.P…
- CVE-2021-3720MEDIUMCVSS 5.5EG 5.52021-11-12
An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.
- CVE-2021-38379MEDIUMCVSS 5.5EG 5.52021-10-27
The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.
- CVE-2021-0706MEDIUMCVSS 5.5EG 5.52021-10-22
In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User int…
- CVE-2021-33923MEDIUMCVSS 5.5EG 5.52021-09-29
Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).
- CVE-2021-1832MEDIUMCVSS 5.5EG 5.52021-09-08
Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logi…
- CVE-2021-1831MEDIUMCVSS 5.5EG 5.52021-09-08
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files.
- CVE-2021-30750MEDIUMCVSS 5.5EG 5.52021-09-08
The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. A malicious application may be able to access the user's recent contacts.
- CVE-2021-31007MEDIUMCVSS 5.5EG 5.52021-08-24
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Priv…
- CVE-2021-31006MEDIUMCVSS 5.5EG 5.52021-08-24
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences.
- CVE-2021-22295MEDIUMCVSS 5.5EG 5.52021-08-06
A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page error OsVmPageFaultHandler.
- CVE-2021-0654MEDIUMCVSS 5.5EG 5.52021-07-14
In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information disclosure from locked profiles with no additional execution privileges needed. User inter…
- CVE-2021-0588MEDIUMCVSS 5.5EG 5.52021-07-14
In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not…
- CVE-2021-20490MEDIUMCVSS 5.5EG 5.52021-06-29
IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791.
- CVE-2020-9451MEDIUMCVSS 5.5EG 5.52021-05-25
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged u…
- CVE-2021-3451MEDIUMCVSS 5.5EG 5.52021-04-27
A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.
- CVE-2021-30494MEDIUMCVSS 5.5EG 5.52021-04-14
Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log fi…
- CVE-2021-30493MEDIUMCVSS 5.5EG 5.52021-04-14
Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast subkey. These privileged operations consist of file name concatenation of a runtime log fil…
- CVE-2021-0428MEDIUMCVSS 5.5EG 5.52021-04-13
In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interacti…
- CVE-2021-25381MEDIUMCVSS 5.5EG 5.52021-04-09
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingInt…
- CVE-2021-25355MEDIUMCVSS 5.5EG 5.52021-03-25
Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent.
- CVE-2021-0382MEDIUMCVSS 5.5EG 5.52021-03-10
In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interacti…
- CVE-2021-0381MEDIUMCVSS 5.5EG 5.52021-03-10
In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is no…
Map vulnerabilities like CWE-276 to your infrastructure
EchelonGraph correlates every CVE — across CWE-276 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →