PT-2022-27529 · Unknown · Drachtio-Server

Name of the Vulnerable Software and Affected Versions: drachtio-server version 0.8.18 Description: The issue concerns the permissions of the /var/log/drachtio directory and the drachtio.log file. Specifically, the directory has a mode of 0777 and the log file has a mode of 0666. This could...

CVE-2022-34314

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...

CVE-2022-34314

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...

CVE-2022-36377

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-3952

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

PT-2022-23337 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +2

Name of the Vulnerable Software and Affected Versions: IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs versions prior to 22.190.0.3 Intelr NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to insecure...

CVE-2022-3952

Summary: CVE-2022-3952 affects ManyDesigns Portofino 5.3.2. The vulnerability is in WarFileLauncher.java:createTempDir, which allows creation of a temporary file in a directory with insecure permissions. This could lead to disclosure of sensitive data. A fix is available in Portofino 5.3.3; patch...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-44733

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

PT-2022-27288 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions prior to build 39900 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For versions prior to build 39900, update to build...

VulnCheck KEV: CVE-2017-7199

Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue...

tripleo-ansible: /var/lib/mistral/overcloud discoverable

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of...

tripleo-ansible: /etc/openstack/clouds.yaml discoverable

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information...

CVE-2022-33922

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earlie...

Dell GeoDrive 安全漏洞

Dell GeoDrive is a free application from Dell, Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. An authorization issue vulnerability exists in Dell GeoDrive versions prior to 2.2.3. The vulnerability stems from the inclusion of insecure file a...

CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

Design/Logic Flaw

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...