VYPR

CWE-732

Incorrect Permission Assignment for Critical Resource

ClassDraftLikelihood: High

Description

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-1 · CAPEC-122 · CAPEC-127 · CAPEC-17 · CAPEC-180 · CAPEC-206 · CAPEC-234 · CAPEC-60 · CAPEC-61 · CAPEC-62 · CAPEC-642

CVEs mapped to this weakness (1,752)

page 16 of 88
  • CVE-2019-2023HigJun 19, 2019
    Google
    Android
    risk 0.54cvss 7.8epss 0.00

    In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product:…

  • CVE-2018-18435HigMar 21, 2019
    KioWare
    Kioware Server
    risk 0.54cvss 7.8epss 0.01

    KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService"…

  • CVE-2018-10712HigOct 30, 2018
    ASRock
    RGBLED
    risk 0.54cvss 7.8epss 0.01

    The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to…

  • CVE-2018-10709HigOct 30, 2018
    ASRock
    RGBLED
    risk 0.54cvss 7.8epss 0.01

    The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways…

  • CVE-2018-8411HigOct 10, 2018
    Microsoft
    Windows Server 2008
    risk 0.54cvss 7.8epss 0.03

    An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows…

  • CVE-2018-17775HigOct 8, 2018
    Seqrite
    End Point Security
    risk 0.54cvss 7.8epss 0.01

    Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an executable file with a Trojan horse.

  • CVE-2018-17776HigSep 28, 2018
    PCProtect
    PCProtect Anti-Virus
    risk 0.54cvss 7.8epss 0.03

    PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse.

  • CVE-2018-14327HigSep 26, 2018
    Ee
    EE40VB
    risk 0.54cvss 7.8epss 0.04

    The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which…

  • CVE-2018-7581HigMar 9, 2018
    WebLog Expert
    Web Server Enterprise
    risk 0.54cvss 7.8epss 0.01

    \ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.

  • CVE-2017-13236HigFeb 12, 2018
    Google
    Android
    risk 0.54cvss 7.8epss 0.01

    In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1.…

  • CVE-2018-6606HigFeb 4, 2018
    MalwareFox
    AntiMalware
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate…

  • CVE-2018-6593HigFeb 3, 2018
    MalwareFox
    AntiMalware
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to…

  • CVE-2017-16945HigJan 31, 2018
    Arq
    Arq
    risk 0.54cvss 7.8epss 0.01

    The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path.

  • CVE-2017-16928HigJan 31, 2018
    Arq
    Arq
    risk 0.54cvss 7.8epss 0.01

    The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.

  • CVE-2018-0752HigJan 4, 2018
    Microsoft
    Windows Server 2012
    risk 0.54cvss 7.8epss 0.03

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…

  • CVE-2017-16895HigDec 1, 2017
    Arqbackup
    Arq
    risk 0.54cvss 7.8epss 0.01

    The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.

  • CVE-2017-8665HigAug 15, 2017
    Microsoft
    Xamarin.iOS
    risk 0.54cvss 7.8epss 0.04

    The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Privilege Vulnerability."

  • CVE-2009-3489HigSep 30, 2009
    Adobe Inc.
    Photoshop Elements
    risk 0.54cvss 7.8epss 0.02

    Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath…

  • CVE-2026-48499CriJul 30, 2026
    Activepieces
    Activepieces
    risk 0.53cvss —epss 0.00

    Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing…

  • CVE-2021-4481HigJun 2, 2026
    Dräger
    Protector Software
    risk 0.53cvss 8.2epss 0.00

    Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the…