CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,665 vulnerabilities with CWE-732
CVE-2018-19589
MEDIUM
Utimaco CryptoServer HSM - Privilege Escalation
CVSS 6.5
CVE-2018-1787
MEDIUM
IBM Spectrum Protect 7.1.0.0-7.1.8.4 - Unprotected Password Exposure via Insecure File Permissions
CVSS 5.1
CVE-2018-4324
MEDIUM
macOS < 10.14 - Unprotected User Data Exposure via Apple ID Permission Handling
CVSS 5.5
CVE-2018-4178
MEDIUM
macOS < 10.13.4 - Unprotected User Data Exposure via Incorrect Permission Assignment
CVSS 5.5
CVE-2018-4051
MEDIUM
GOG Galaxy 1.2.47 - Local Privilege Escalation via Privileged Helper Tool
CVSS 5.5
CVE-2018-4049
HIGH
GOG Galaxy 1.2.48.36 - Local Privilege Escalation via Games Directory File Permissions
CVSS 7.8
CVE-2018-3974
HIGH
GOG Galaxy - Unauthenticated Local Privilege Escalation via Install Directory File Overwrite
CVSS 7.8
CVE-2018-19113
HIGH
Pronestor Health Monitoring < 8.1.12.0 - Privilege Escalation via Trojan Horse Executable
CVSS 7.3
CVE-2018-4050
HIGH
GOG Galaxy 1.2.47 - Local Privilege Escalation via Folder Permission Manipulation
CVSS 7.8
CVE-2018-12546
MEDIUM
Eclipse Mosquitto <1.5.5 - Info Disclosure
CVSS 6.5
CVE-2018-18435
HIGH
kioware_server < 4.9.6 - Unauthenticated Privilege Escalation via Weak Directory Permissions
CVSS 7.8
CVE-2018-15508
HIGH
Five9 Agent Desktop Plus 10.0.70 - Denial of Service via WebSocket Connection on Port 8083
CVSS 7.5
CVE-2018-15509
CRITICAL
Five9 Agent Desktop Plus 10.0.70 - Incorrect Access Control
CVSS 9.8
CVE-2018-19393
HIGH
Cobham Satcom Sailor 800/900 - Privilege Escalation
CVSS 7.5
CVE-2018-18254
HIGH
CapMon Access Manager < 5.4.1.1005 - Unauthenticated Privilege Escalation via Custom App Launcher Whitelist Bypass
CVSS 7.8
CVE-2018-12223
MEDIUM
Intel Graphics Driver < 24.20.100.6373 - Guest-to-Host Escape via User Mode Driver
CVSS 6.3
CVE-2018-12217
LOW
Intel Graphics Driver < 24.20.100.6373 - Insufficient Access Control in Kernel Mode
CVSS 2.3
CVE-2018-12209
LOW
Intel Graphics Driver < 24.20.100.6373 - Unprivileged Device Configuration Information Disclosure
CVSS 3.3
CVE-2018-12200
MEDIUM
Intel Capability Licensing Service < 1.50.638.1 - Incorrect Permission Assignment
CVSS 6.7
CVE-2018-20621
HIGH
Microvirt MEmu 6.0.6 - Local Privilege Escalation via Binary Planting
CVSS 7.8
CVE-2018-20798
HIGH
pfSense 2.4.4_1 - Incorrect Permission Assignment for Critical Resource
CVSS 7.5
CVE-2018-18495
MEDIUM
Firefox < 64.0 - Incorrect Permission Assignment for Critical Resource via WebExtension Content Scripts
CVSS 6.5
CVE-2018-12396
MEDIUM
Firefox ESR < 60.3 - Privilege Escalation
CVSS 6.5
CVE-2018-9867
MEDIUM
SonicOS < 5.9.1.10 - Improper Authorization in Certificate Download
CVSS 5.5
CVE-2018-10612
CRITICAL
CODESYS Control V3 <3.5.14.0 - Info Disclosure
CVSS 9.8
Details
Vulnerabilities
1,665
Exploit Likelihood
High