CWE-732 Incorrect Permission Assignment for Critical Resource
classThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (1933)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22960US | high7.8OT critical | KEV | ||
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor… | ||||
| CVE-2021-23874US | high7.8OT critical | KEV | ||
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP… | ||||
| CVE-2019-15752US | high7.8OT critical | KEV | ||
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\ve… | ||||
| CVE-2018-13374US | medium4.3OT critical | KEV | ||
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials co… | ||||
| CVE-2021-25646US | high8.8 | Exploit | ||
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments,… | ||||
| CVE-2011-3923US | critical9.8 | Exploit | ||
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands. | ||||
| CVE-2018-15379US | critical9.8 | Exploit | ||
A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an… | ||||
| CVE-2022-2185US | high8.8 | Exploit | ||
A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated use… | ||||
| CVE-2021-44521US | critical9.1 | Exploit | ||
When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threa… | ||||
| CVE-2017-16885US | critical9.8 | Exploit | ||
Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows re… | ||||
| CVE-2023-32986US | high8.8 | — | ||
Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item… | ||||
| CVE-2021-21809US | critical9.1 | Exploit | ||
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An att… | ||||
| CVE-2020-11107US | high8.8 | Exploit | ||
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini fo… | ||||
| CVE-2018-10285US | critical9.8 | Exploit | ||
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication… | ||||
| CVE-2017-9462US | high8.8 | Exploit | ||
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a rep… | ||||
| CVE-2018-1000207US | high7.2 | — | ||
MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating f… | ||||
| CVE-2017-9602US | critical9.8 | Exploit | ||
KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the fi… | ||||
| CVE-2012-10030US | critical9.8OT high | Exploit | ||
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accep… | ||||
| CVE-2025-49131US | critical9.9 | Exploit | ||
FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sand… | ||||
| CVE-2020-0668US | high7.8 | Exploit | ||
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID… | ||||
04
attack patterns (11)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan