CWE-276
Incorrect Default Permissions
Description
During installation, installed file permissions are set to allow anyone to modify those files.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-1 · CAPEC-127 · CAPEC-81
CVEs mapped to this weakness (1,561)
page 48 of 79| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-57847 | Med | 0.42 | 6.4 | 0.00 | Apr 8, 2026 | A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within… | ||
| CVE-2025-8766 | Med | 0.42 | 6.4 | 0.00 | Mar 13, 2026 | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an… | ||
| CVE-2025-57849 | Med | 0.42 | 6.4 | 0.00 | Mar 13, 2026 | A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a… | ||
| CVE-2025-15343 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Enforce. | ||
| CVE-2025-15341 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Benchmark. | ||
| CVE-2025-15340 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Comply. | ||
| CVE-2025-15339 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Discover. | ||
| CVE-2025-15338 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Partner Integration. | ||
| CVE-2025-15337 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Patch. | ||
| CVE-2025-15336 | Med | 0.42 | 6.5 | 0.00 | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Performance. | ||
| CVE-2025-57850 | Med | 0.42 | 6.4 | 0.00 | Dec 2, 2025 | A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected… | ||
| CVE-2025-43507 | Med | 0.42 | 6.5 | 0.00 | Nov 4, 2025 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user. | ||
| CVE-2025-57848 | Med | 0.42 | 6.4 | 0.00 | Oct 23, 2025 | A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an… | ||
| CVE-2025-58712 | Med | 0.42 | 6.4 | 0.00 | Oct 22, 2025 | A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,… | ||
| CVE-2025-57852 | Med | 0.42 | 6.4 | 0.00 | Sep 30, 2025 | A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected… | ||
| CVE-2025-7195 | Med | 0.42 | 6.4 | 0.00 | Aug 7, 2025 | Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time.… | ||
| CVE-2024-55398 | Med | 0.42 | 6.5 | 0.00 | Aug 6, 2025 | 4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions. | ||
| CVE-2025-41665 | — | Med | 0.42 | 6.5 | 0.00 | Jul 8, 2025 | An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file. | |
| CVE-2024-54564 | Med | 0.42 | 6.5 | 0.00 | Mar 21, 2025 | This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received from AirDrop may not have the quarantine flag applied. | ||
| CVE-2024-45690 | Hig | 0.42 | 7.5 | 0.00 | Nov 20, 2024 | A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts. |
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within…
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an…
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a…
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Enforce.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Benchmark.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Comply.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Discover.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Partner Integration.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Patch.
- risk 0.42cvss 6.5epss 0.00
Tanium addressed an incorrect default permissions vulnerability in Performance.
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected…
- risk 0.42cvss 6.5epss 0.00
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an…
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,…
- risk 0.42cvss 6.4epss 0.00
A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected…
- risk 0.42cvss 6.4epss 0.00
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time.…
- risk 0.42cvss 6.5epss 0.00
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
- risk 0.42cvss 6.5epss 0.00
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.
- risk 0.42cvss 6.5epss 0.00
This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received from AirDrop may not have the quarantine flag applied.
- risk 0.42cvss 7.5epss 0.00
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.