CVE-2024-25654

Insecure permissions for log files of AVSystem Unified Management Platform UMP 23.07.0.16567LTS allow members with local access to the UMP application server to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database...

CVE-2024-25654

Insecure permissions for log files of AVSystem Unified Management Platform UMP 23.07.0.16567LTS allow members with local access to the UMP application server to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database...

CVE-2024-22752

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

Design/Logic Flaw

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

PT-2024-19552 · Easeus · Easeus Mobimover

Name of the Vulnerable Software and Affected Versions: EaseUS MobiMover version 6.0.5 Build 21620 Description: The issue is related to insecure permissions in the application, allowing attackers to gain escalated privileges by using a crafted executable launched from the application installation...

CVE-2024-22752

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

CVE-2024-22752

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

CVE-2024-22752

CVE-2024-22752 concerns an insecure permissions issue in EaseUS MobiMover version 6.0.5 Build 21620. Multiple sources (NVD, Red Hat, CNNVD, CVE listing) describe that an attacker can escalate privileges by exploiting a crafted executable launched from the application installation directory. The r...

BIT-GITLAB-2020-10083

GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied...

BIT-GITLAB-2020-10088

GitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it was possible for invited groups to be given the incorrect permission level...

BIT-GITLAB-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2023-6917

performancecopilot/pcp is vulnerable to Creation of Temporary File With Insecure Permissions. The vulnerability is due to the mixed privilege levels utilized by systemd services associated with the package. While certain services operate within the confines of limited user/group privileges, other...

PT-2024-13619 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions before build 37391 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. Recommendations: For Acronis Cyber Protect 16 versions before build 37391, update t...

CVE-2024-27456

rack-cors aka Rack CORS Middleware 2.0.1 has 0666 permissions for the .rb files...

CVE-2023-33870

Insecure inherited permissions in some IntelR Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33870

Insecure inherited permissions in some IntelR Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33870

CVE-2023-33870 involves insecure inherited permissions in Intel® Ethernet tools and driver install software, enabling an authenticated user to potentially escalate privileges via local access. Affected components include: Intel® Ethernet Connections Boot Utility, Preboot Images, and EFI Drivers (...

PT-2024-8892 · Intel · Intel(R) Hid Event Filter

Name of the Vulnerable Software and Affected Versions: IntelR HID Event Filter software versions prior to 2.2.2.1 Description: The issue is related to insecure inherited permissions in some IntelR HID Event Filter software installers, which may allow an authenticated user to potentially enable...

CVE-2023-38960

Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory...

Design/Logic Flaw

Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory...