CVE-2022-45193

CVE-2022-45193 affects CBRN-Analysis prior to version 22. The issue is described as weak file permissions under the Public Profile, which can lead to disclosure of file contents or privilege escalation. Connected sources corroborate the same root cause and affected version range. No exploitation ...

PT-2022-27423 · Unknown · Cbrn-Analysis

Name of the Vulnerable Software and Affected Versions: CBRN-Analysis versions prior to 22 Description: The issue is related to weak file permissions under the Public Profile, which can lead to the disclosure of file contents or privilege escalation. Recommendations: For versions prior to 22, upda...

Privilege escalation

AsusSwitch.exe on ASUS personal computers running Windows sets weak file permissions, leading to local privilege escalation this also can be used to delete files within the system arbitrarily. This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0...

CVE-2022-36438

Summary: CVE-2022-36438 affects ASUS System Control Interface 3 (before 3.1.5.0) and AsusSwitch.exe (before 1.0.10.0) on Windows. The issue is weak file permissions in these components, which enables local privilege escalation and could allow arbitrary file deletion within the system. Root cause:...

CVE-2022-36438

AsusSwitch.exe on ASUS personal computers running Windows sets weak file permissions, leading to local privilege escalation this also can be used to delete files within the system arbitrarily. This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0...

CVE-2022-29594

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...

CVE-2022-29594

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...

CVE-2022-29594

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...

CVE-2022-29594

The CVE affects eG Agent prior to version 7.2, where weak file permissions can allow local privilege escalation to SYSTEM. The root cause is permission misconfiguration on sensitive files used by the agent. In affected environments, exploitation would grant full host privileges; no exploit detail...

SaltStack Salt Allows creating certificates with weak file permissions

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

GHSA-9W4F-3V37-6F75 ceph-deploy allows local users to obtain sensitive information by reading the file

ceph-deploy before 1.5.23 uses weak permissions 644 for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

Code injection

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26250

CVE-2022-26250 affects SynaMan v5.1 and earlier. Root cause is weak file permissions, enabling an authenticated attacker to escalate privileges. Documented impact is privilege escalation with local access; exploitation status is not detailed in the provided sources. No remediation details are inc...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies, USA. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which stems from a weak file permission in the software that can be exploited by an authenticated attacker to elevate...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with WebSphere Remote Server

Summary IBM Db2 is shipped with WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

Security Bulletin: IBM® Db2® could allow a local user to read and write specific files due to weak file permissions (CVE-2020-4976)

Summary IBM® Db2® could allow a local user to read and write specific files due to weak file permissions Vulnerability Details CVEID: CVE-2020-4976 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and wri...