CWE-276 Archives - CVE Vulnerability

CVE-2018-7822

Sun, 26 Feb 2023 06:51:11 +0000

An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic.

The post CVE-2018-7822 appeared first on CVE Vulnerability.

CVE-2018-7535

Sun, 26 Feb 2023 06:51:05 +0000

An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product’s files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.

The post CVE-2018-7535 appeared first on CVE Vulnerability.

CVE-2018-7533

Sun, 26 Feb 2023 06:51:04 +0000

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.

The post CVE-2018-7533 appeared first on CVE Vulnerability.

CVE-2018-6683

Sun, 26 Feb 2023 06:50:48 +0000

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

The post CVE-2018-6683 appeared first on CVE Vulnerability.

CVE-2018-21061

Sun, 26 Feb 2023 06:48:51 +0000

An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 (August 2018).

The post CVE-2018-21061 appeared first on CVE Vulnerability.

CVE-2018-2025

Sun, 26 Feb 2023 06:48:31 +0000

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.

The post CVE-2018-2025 appeared first on CVE Vulnerability.

CVE-2018-20090

Sun, 26 Feb 2023 06:48:27 +0000

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.

The post CVE-2018-20090 appeared first on CVE Vulnerability.

CVE-2018-19592

Sun, 26 Feb 2023 06:48:13 +0000

The “CLink4Service” service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITYSYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.

The post CVE-2018-19592 appeared first on CVE Vulnerability.

CVE-2018-17860

Sun, 26 Feb 2023 06:47:35 +0000

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

The post CVE-2018-17860 appeared first on CVE Vulnerability.

CVE-2018-13286

Sun, 26 Feb 2023 06:45:57 +0000

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.

The post CVE-2018-13286 appeared first on CVE Vulnerability.