VYPR

CWE-732

Incorrect Permission Assignment for Critical Resource

ClassDraftLikelihood: High

Description

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-1 · CAPEC-122 · CAPEC-127 · CAPEC-17 · CAPEC-180 · CAPEC-206 · CAPEC-234 · CAPEC-60 · CAPEC-61 · CAPEC-62 · CAPEC-642

CVEs mapped to this weakness (1,752)

page 23 of 88
  • CVE-2023-5936HigMay 15, 2024
    risk 0.51cvss 7.8epss 0.00

    On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

  • CVE-2023-35841HigMay 14, 2024
    risk 0.51cvss 7.8epss 0.00

    Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

  • CVE-2023-47712HigMay 14, 2024
    risk 0.51cvss 7.8epss 0.00

    IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due to improper permissions control. IBM X-Force ID: 271527.

  • CVE-2023-51579HigMay 3, 2024
    risk 0.51cvss 7.8epss 0.00

    Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…

  • CVE-2023-40516HigMay 3, 2024
    risk 0.51cvss 7.8epss 0.00

    LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2024-21431HigMar 12, 2024
    risk 0.51cvss 7.8epss 0.01

    Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

  • CVE-2024-22016HigFeb 2, 2024
    risk 0.51cvss 7.8epss 0.00

    In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.

  • CVE-2023-44120HigJan 9, 2024
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code…

  • CVE-2023-6179HigNov 17, 2023
    risk 0.51cvss 7.8epss 0.00

    Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code execution. Honeywell…

  • CVE-2023-28134HigNov 12, 2023
    risk 0.51cvss 7.8epss 0.00

    Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

  • CVE-2023-40361HigOct 20, 2023
    risk 0.51cvss 7.8epss 0.00

    SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the…

  • CVE-2023-45205HigOct 10, 2023
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate…

  • CVE-2022-30527HigOct 10, 2023
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and…

  • CVE-2023-32162HigSep 6, 2023
    risk 0.51cvss 7.8epss 0.00

    Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute…

  • CVE-2023-4383HigAug 16, 2023
    risk 0.51cvss 7.8epss 0.00

    A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The…

  • CVE-2022-39062HigAug 8, 2023
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.

  • CVE-2023-28133HigJul 23, 2023
    risk 0.51cvss 7.8epss 0.06

    Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file

  • CVE-2023-33990HigJul 11, 2023
    risk 0.51cvss 7.8epss 0.00

    SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An attacker with low privileged account and access to the local system can write into the shared memory objects. This can be leveraged by an…

  • CVE-2023-30897HigJun 13, 2023
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local…

  • CVE-2023-28399HigJun 1, 2023
    risk 0.51cvss 7.8epss 0.00

    Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted…