CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,666 vulnerabilities with CWE-732
CVE-2017-1266
MEDIUM
IBM Security Guardium 10.0 - Incorrect Permission Assignment for Critical Resource
CVSS 5.4
CVE-2017-15877
CRITICAL
GPWeb 8.4.61 - Unauthenticated Sensitive Information Exposure via db.php
CVSS 9.8
CVE-2017-1716
LOW
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, 9.2.0 - Sensitive Information Disclosure via Improper Permission Assignment
CVSS 3.3
CVE-2017-17568
HIGH
Scubez Posty Readymade Classifieds - Unauthenticated Sensitive Information Exposure via admin/user_activate_submit.php
CVSS 7.5
CVE-2017-13168
HIGH
Android Kernel - Elevation of Privilege in SCSI Driver
CVSS 7.8
CVE-2017-16895
HIGH
Arq 5.0.0.65-5.9.9 - Local Privilege Escalation via Helper App Data Packet
CVSS 7.8
CVE-2017-16933
HIGH
Icinga 2.x-2.8.1 - Privilege Escalation
CVSS 7.0
CVE-2017-8158
MEDIUM
FusionCompute V100R005C00 and V100R005C10 - Authenticated Denial of Service via VM Process Exhaustion
CVSS 6.5
CVE-2017-16882
HIGH
Icinga Core <1.14.0 - Privilege Escalation
CVSS 7.8
CVE-2017-1000221
MEDIUM
Opencast < 2.2.3 - Incorrect Permission Assignment for Critical Resource
CVSS 6.5
CVE-2017-1000125
HIGH
Codiad - Arbitrary File Write in Configuration File
CVSS 7.5
CVE-2017-0845
HIGH
Android 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in SyncStorageEngine
CVSS 7.5
CVE-2017-0831
HIGH
Android <8.0 - Privilege Escalation
CVSS 7.8
CVE-2017-0830
HIGH
Android <8.0 - Privilege Escalation
CVSS 7.8
CVE-2017-16834
HIGH
PNP4Nagios <0.6.26 - Privilege Escalation
CVSS 7.8
CVE-2017-15288
HIGH
Scala < 2.10.7, 2.11.x < 2.11.12, 2.12.x < 2.12.4 - Incorrect Permission Assignment
CVSS 7.8
CVE-2017-3166
HIGH
Apache Hadoop 2.6.1-2.6.5, 2.7.0-2.7.3, 3.0.0-alpha1-3.0.0-alpha3 - Sensitive File Exposure via YARN
CVSS 7.8
CVE-2017-16754
MEDIUM
Bolt < 3.3.6 - Unauthenticated Access to Profiler Routes
CVSS 5.3
CVE-2017-16757
HIGH
Hola VPN 1.34 - Privilege Escalation
CVSS 7.8
CVE-2017-16659
HIGH
Gentoo mail-filter/assp <1.9.8.13030 - Privilege Escalation
CVSS 7.8
CVE-2017-16638
CRITICAL
Gentoo net-misc/vde <2.3.2-r4 - Privilege Escalation
CVSS 9.8
CVE-2017-1000153
CRITICAL
Mahara <15.04.10-16.04.4 - Info Disclosure
CVSS 9.8
CVE-2017-1000134
HIGH
Mahara <1.8.6, <1.9.4, <1.10.1, <15.04.0 - Info Disclosure
CVSS 8.1
CVE-2017-15945
HIGH
MariaDB < 10.0.30 - Incorrect Permission Assignment for Critical Resource via chown Calls
CVSS 7.8
CVE-2017-5118
MEDIUM
Google Chrome <61.0.3163.79-61.0.3163.81 - XSS
CVSS 4.3
Details
Vulnerabilities
1,666
Exploit Likelihood
High