CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,666 vulnerabilities with CWE-732
CVE-2018-1203
MEDIUM
Dell EMC Isilon OneFS 8.0.0.0-8.0.0.6 - Privilege Escalation via Sudo tcpdump
CVSS 6.7
CVE-2018-5349
HIGH
Heimdal PRO v2.2.190 - Privilege Escalation
CVSS 7.8
CVE-2018-8933
CRITICAL
AMD EPYC Server Firmware - Incorrect Permission Assignment for Critical Resource
CVSS 9.0
CVE-2018-8932
CRITICAL
AMD Ryzen and Ryzen Pro Firmware - Insufficient Access Control for Secure Processor
CVSS 9.0
CVE-2018-8931
CRITICAL
AMD Ryzen, Ryzen Pro, and Ryzen Mobile Firmware - Insufficient Access Control for Secure Processor
CVSS 9.0
CVE-2018-1141
HIGH
Nessus <7.0.3 - Privilege Escalation
CVSS 7.0
CVE-2018-1197
HIGH
Windows Stemcells <1200.14 - Privilege Escalation
CVSS 8.5
CVE-2018-1000132
CRITICAL
Mercurial < 4.5.1 - Unauthorized Data Access via Protocol Server
CVSS 9.1
CVE-2018-1386
HIGH
IBM Tivoli Workload Automation for AIX - Privilege Escalation
CVSS 7.8
CVE-2018-1000080
MEDIUM
Ajenti 2 - Insecure Permissions in Plugin Download
CVSS 6.5
CVE-2018-1000072
HIGH
iRedMail <commit f04b8ef - Info Disclosure
CVSS 7.5
CVE-2018-1000071
HIGH
Roundcube Webmail < 1.3.4 - Insecure Permissions in Enigma Plugin
CVSS 7.5
CVE-2018-6623
HIGH
Hola VPN 1.79.859 - Unauthenticated Arbitrary File Write via Service Permissions
CVSS 8.8
CVE-2018-7581
HIGH
WebLog Expert Web Server Enterprise 9.4 - Incorrect Permission Assignment for Critical Resource
CVSS 7.8
CVE-2018-1069
HIGH
Red Hat OpenShift Enterprise 3.7 - Improper Access Control for Container Network Filesystems
CVSS 7.1
CVE-2018-5313
HIGH
Rapid Scada 5.5.0 - Privilege Escalation
CVSS 7.8
CVE-2018-1417
HIGH
IBM Java SDK 7.1 and 8.0 - Unauthenticated Privilege Escalation via J9 JVM Security Manager Bypass
CVSS 8.1
CVE-2018-7408
HIGH
npm 5.7.0 - Incorrect Permission Assignment for Critical Resource via correctMkdir
CVSS 7.8
CVE-2018-7311
HIGH
PrivateVPN 2.0.31 - Privilege Escalation via OpenVPN Binary Overwrite
CVSS 8.8
CVE-2018-1168
HIGH
ABB MicroSCADA 9.3 - Privilege Escalation
CVSS 7.8
CVE-2018-1164
CRITICAL
ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5 - DoS
CVSS 9.8
CVE-2018-7169
MEDIUM
shadow 4.5 - Unauthenticated Incorrect Permission Assignment via newgidmap
CVSS 5.3
CVE-2018-1000025
HIGH
Firebase Admin SDK for PHP <3.8.0 - Info Disclosure
CVSS 8.1
CVE-2018-1053
HIGH
PostgreSQL 9.3.0-9.3.20, 9.4.0-9.4.15, 9.5.0-9.5.10, 9.6.0-9.6.6, 10.0-10.1 - Insecure Temporary File Permissions
CVSS 7.0
CVE-2018-6606
HIGH
MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation via IOCTL 0x80002010 and 0x8000204C
CVSS 7.8
Details
Vulnerabilities
1,666
Exploit Likelihood
High