CWE-732

High likelihood

Incorrect Permission Assignment for Critical Resource

Parent: CWE-285 - Improper Authorization

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

1,622 vulnerabilities with CWE-732

CVE-2018-2489 HIGH

SAP Fiori Client < 1.11.5 - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-19072 MEDIUM

Opticam I5 Application Firmware - Incorrect Permission Assignment

CVSS 5.5

CVE-2018-19071 HIGH

Opticam I5 Application Firmware - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-10712 HIGH

Asrock A-tuning < 3.0.210 - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-10710 HIGH

Asrock A-tuning < 3.0.210 - Incorrect Permission Assignment

CVSS 7.1

CVE-2018-10709 HIGH

Asrock A-tuning < 3.0.210 - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-11951 MEDIUM

Snapdragon Mobile <SD 845-SD 850 - Info Disclosure

CVSS 5.5

CVE-2018-18654 HIGH

Debian Crossroads - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-11792 CRITICAL

Apache Impala < 3.0.1 - Incorrect Permission Assignment

CVSS 9.8

CVE-2018-17873 HIGH

WiFiRanger <7.0.8rc3 - Info Disclosure

CVSS 8.8

CVE-2018-11080 HIGH

EMC Secure Remote Services - Incorrect Permission Assignment

CVSS 7.3

CVE-2018-7924 LOW

Huawei Anne-AL00 <8.0.0.151(C00) - Info Disclosure

CVSS 2.4

CVE-2018-13399 HIGH

Atlassian Crucible < 4.6.1 - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-17892 HIGH

NUUO CMS <3.1 - Privilege Escalation

CVSS 8.8

CVE-2018-1724 MEDIUM

IBM Spectrum Lsf - Incorrect Permission Assignment

CVSS 5.9

CVE-2018-12173 HIGH

Intel Server Board S2600bp Firmware < 00.01.0014 - Incorrect Permission Assignment

CVSS 7.6

CVE-2018-12131 HIGH

Intel NVMe <4.0.0.1007, Intel RSTe <4.7.0.2083 - Privilege Escalation

CVSS 7.8

CVE-2018-8411 HIGH

Windows - Privilege Escalation

CVSS 7.8

CVE-2018-17775 HIGH

Seqrite End Point Security <7.4 - Privilege Escalation

CVSS 7.8

CVE-2018-1750 MEDIUM

IBM Security Key Lifecycle Manager - Incorrect Permission Assignment

CVSS 4.2

CVE-2018-11064 HIGH

Dell Emc Unity Operating Environment - Incorrect Permission Assignment

CVSS 7.8

CVE-2018-15379 CRITICAL

Cisco Prime Infrastructure - Path Traversal

CVSS 9.8

CVE-2018-0422 HIGH

Cisco Webex Meetings Online < 1.3.37 - Incorrect Permission Assignment

CVSS 7.3

CVE-2018-17872 HIGH

Verba Collaboration <9.2.1.5545 - Info Disclosure

CVSS 8.8

CVE-2018-6261 HIGH

Nvidia Geforce Experience < 3.15 - Incorrect Permission Assignment

CVSS 7.0

Details

Vulnerabilities 1,622

Exploit Likelihood High

Links