Dell Command | Monitor 访问控制错误漏洞

Dell Command | Monitor is a software application from Dell, Inc. Dell Command | Monitor is a software application from Dell Inc. that enables IT administrators to easily manage fleet resource inventories, monitor system performance, modify BIOS settings, and remotely collect information about...

PT-2023-21529 · Dell · Dell Command | Monitor

Name of the Vulnerable Software and Affected Versions: Dell Command Monitor versions 10.9 and prior Description: The issue is related to improper folder permissions, allowing a local authenticated malicious user to potentially exploit this vulnerability, leading to privilege escalation by writing...

App Layering "The permissions on [foldername] are incorrectly ordered.."

When attempting to adjust permissions on a folder in a compiled layered image - the following message is seen "The permissions on foldername are incorrectly ordered, which may cause some entries to be ineffective"...

K08503505: BIG-IP Edge Client for Windows vulnerability CVE-2021-23022

Security Advisory Description The BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. CVE-2021-23022 Impact This vulnerability can be exploited to allow an unprivileged user to run a specially crafted application to gain privilege escalation on th...

Dell Command Configure Elevation of Privilege Vulnerability

Dell Command Configure is a Dell application that provides configuration capabilities for business client platforms. Dell Command Configure version 4.8 and prior versions contain an elevation of privilege vulnerability that stems from incorrect folder permissions, which could be exploited to modi...

CVE-2022-45454

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent Windows before build 30161, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45454

CVE-2022-45454 affects Acronis Agent (Windows) before build 30161 and Acronis Cyber Protect 15 (Windows) before build 30984. Root cause is insecure folder permissions, causing potential disclosure of sensitive information. Affected products: Acronis Agent (Windows) prior to 30161; Acronis Cyber P...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent Windows versions prior to 30161, Acronis Cyber Protect 15 Windows versions prior to 30984, which originates from improperly set folder permissions. An attacker could exploit the vulnerabili...

CVE-2022-34457

Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and...

Dell Command Configure 安全漏洞

Dell Command Configure is a Dell application that provides configuration capabilities for business client platforms. Dell Command Configure version 4.8 and prior versions contain an elevation of privilege vulnerability that stems from incorrect folder permissions, which could be exploited to modi...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

PT-2023-18789 · Unknown · Shibboleth Service Provider

Name of the Vulnerable Software and Affected Versions: Shibboleth Service Provider SP versions prior to 3.4.1 Description: The issue concerns insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP. This allows an unprivileged local attacker to escalate...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

Siemens Simcenter STAR-CCM+ 安全漏洞

Siemens Simcenter STAR-CCM is a complete multi-physics field solution from Siemens Germany that simulates products and designs working under real-world conditions. a security vulnerability exists in Siemens Simcenter STAR-CCM, which stems from improperly assigning file permissions to installation...

National Instruments LabVIEW 安全漏洞

National Instruments LabVIEW NI LabVIEW is a graphical program compilation platform from National Instruments. A security vulnerability exists in National Instruments LabVIEW that stems from incorrect default permissions in a folder. An attacker could exploit the vulnerability to elevate privileg...

CVE-2022-45305

Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Python311 and all files located in that folder...

PT-2022-27520 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent Windows versions before build 30161 Acronis Cyber Protect 15 Windows versions before build 30984 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. Recommendations: For...

PT-2022-6627 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 30430 Acronis Cyber Protect 15 versions before build 30984 Description: The issue is related to local privilege escalation due to insecure folder permissions. This can allow an attacker to elevate their...