CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
337 vulnerabilities with CWE-281
CVE-2023-52373
HIGH
Content Sharing Pop-up - Info Disclosure
CVSS 7.5
CVE-2023-6186
HIGH
LibreOffice 7.5.0-7.5.8 - Built-In Macro Execution Without Warning
CVSS 8.3
CVE-2023-47463
CRITICAL
GL.iNet AX1800 4.0.0-4.4.9 - Unauthenticated Remote Code Execution via gl_nas_sys Authentication Function
CVSS 9.8
CVE-2023-6239
MEDIUM
M-Files Server <23.11.13168.7 - Privilege Escalation
CVSS 5.4
CVE-2023-48240
CRITICAL
XWiki 11.10.1-14.10.14 - Cookie Theft and Server-Side Request Forgery via Diff Image Embedding
CVSS 9.0
CVE-2023-43612
HIGH
OpenHarmony <3.2.2 - Info Disclosure
CVSS 8.4
CVE-2023-4996
MEDIUM
Netskope NSClient <100 - Privilege Escalation
CVSS 6.6
CVE-2023-39902
HIGH
NXP U-Boot Secondary Program Loader < 2023.07 - Unauthenticated Privilege Escalation via Crafted FIT Structure
CVSS 7.0
CVE-2023-45807
MEDIUM
OpenSearch < 1.3.14.0 and OpenSearch Security Plugin 2.0.0.0-2.10.0.0 - Authenticated Unauthorized Metadata Modification
CVSS 5.4
CVE-2023-30735
MEDIUM
SAssistant < 8.7 - Unauthorized Backup Data Access
CVSS 5.1
CVE-2023-41939
HIGH
Jenkins SSH2 Easy Plugin <1.4 - Privilege Escalation
CVSS 8.8
CVE-2023-31926
HIGH
Brocade Fabric OS <9.1.1c, 9.2.0 - Code Injection
CVSS 7.1
CVE-2023-1386
LOW
QEMU - Improper Preservation of Permissions in 9p Passthrough Filesystem
CVSS 3.3
CVE-2023-34034
CRITICAL
Spring Security 5.6.0-5.6.11, 5.7.0-5.7.8, 5.8.0-5.8.3, 6.0.0-6.0.3, 6.1.0 Security Bypass
CVSS 9.1
CVE-2023-21249
MEDIUM
OneTimePermissionUserManager - Privilege Escalation
CVSS 5.5
CVE-2023-35938
MEDIUM
Tuleap <14.9.99.63 - Privilege Escalation
CVSS 4.1
CVE-2023-2818
MEDIUM
Insider Threat Management Agent <7.14.3 - Info Disclosure
CVSS 5.5
CVE-2023-32552
MEDIUM
Trend Micro Apex One/Apex One as a Service - Info Disclosure
CVSS 5.3
CVE-2023-2993
MEDIUM
Lenovo NextScale N1200 Enclosure Firmware < fhet60b-3.40 - Authenticated Privilege Escalation via Web Management API
CVSS 5.4
CVE-2023-34672
HIGH
Elenos ETG150 FM <3.12 - Privilege Escalation
CVSS 8.8
CVE-2023-32400
MEDIUM
iPadOS < 16.5 - Improper Preservation of Permissions
CVSS 5.5
CVE-2023-32388
MEDIUM
iPadOS < 15.7.6 - Privacy Bypass via Log Entry Data Exposure
CVSS 5.5
CVE-2023-32355
MEDIUM
macOS 11.0-11.7.6 - Unprotected File System Modification via Logic Issue
CVSS 5.5
CVE-2023-28161
HIGH
Firefox < 111.0 - Permission Persistence via File URL Handling
CVSS 8.8
CVE-2023-31923
HIGH
Suprema BioStar 2 <2022 Q4 v2.9.1 - Privilege Escalation
CVSS 8.8
Details
Vulnerabilities
337