CVE-2019-4652: Incorrect Default Permissions

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...

CVE-2019-8071

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-8071: Incorrect Permission Assignment for Critical Resource

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

Adobe Download Manager Insecure File Permissions Vulnerability

Adobe Download Manager is an application for managing and downloading Adobe products from Adobe USA. A security vulnerability exists in version 2.0.0.363 of Adobe Download Manager for Windows-based platforms. An attacker can exploit the vulnerability to elevate privileges...

PT-2019-6058

Name of the Vulnerable Software and Affected Versions Adobe Download Manager version 2.0.0.363 Description The issue is related to insecure file permissions and insufficient data authentication, which could allow a remote attacker to escalate privileges. Recommendations For Adobe Download Manager...

CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D18...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

Juniper Junos CVE-2019-0073 Local Insecure File Permissions Vulnerability

Description Juniper Junos is prone to a local insecure file-permission vulnerability. A local attacker can exploit this issue to access sensitive information stored in the file-system. The following versions of Junos are vulnerable. Juniper Junos 15.1X49 versions prior to 15.1X49-D180 Juniper Jun...

PT-2019-3619

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D180 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S7 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S8, 17.4R3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S8...

CVE-2018-18630

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code...

Code injection

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code...

PT-2019-9611

Name of the Vulnerable Software and Affected Versions McKesson Cardiology versions 13.x through 14.x Description A vulnerability was found in the McKesson Cardiology product due to insecure file permissions in the default installation. This may allow an attacker with local system access to execut...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1787

CVE-2018-1787 affects IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments on Windows. The root cause is insecure file permissions that expose passwords. Affected products/versions include Backup-Archive Client 7.1.x (7.1.8.0–7.1.8.4) and 8.1.x (8.1.2.0–8.1...

PT-2019-9529

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue is caused by insecure file permissions, leading to a password exposure. Recommendations For IBM Spectrum Protect versions 7.1 through 8.1, update the file permissions to secur...

Security Bulletin: Password Exposure in IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments on Windows platforms (CVE-2018-1787)

Summary IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client and IBM Spectrum Protect for Virtual Environments on Windows are affected by a password exposure vulnerability caused by insecure file permissions. Vulnerability Details CVEID: CVE-2018-1787 DESCRIPTION: IBM Spectr...

GOG Galaxy Games directory insecure file permissions local privilege elevation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy’s “Games” directory. An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges. Tested Versions Gog...