Weaknesses of type CWE-552

365 results

Arquivos ou diretórios acessíveis a terceiros

Ocorre quando arquivos ou diretórios sensíveis ficam expostos com permissões inadequadas, permitindo que usuários não autorizados (locais ou remotos) leiam, modifiquem ou executem conteúdo confidencial. É um erro de configuração de controle de acesso que compromete a confidencialidade e integridade dos dados.

Example

Um servidor web que salva chaves privadas de API ou credenciais de banco de dados em um diretório público (/var/www/html), ou um arquivo de configuração com modo 644 contendo senhas que qualquer usuário do sistema consegue ler. Um atacante consegue recuperar essas informações sensíveis sem autenticação.

How to mitigate

Aplique o princípio do menor privilégio: defina permissões de arquivo (chmod) e ACLs restritivas (apenas quem precisa acessa), armazene dados sensíveis fora da raiz pública do servidor web, use variáveis de ambiente ou cofres de secrets para credenciais, e audite regularmente permissões e propriedade de arquivos críticos.

CVE-2022-2392—Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File DownloadEPSS 1.1%CVE-2023-1124HIGHShopping Cart & eCommerce Store < 5.4.3 - Admin+ LFIEPSS 1.1%CVE-2021-32752HIGHFiles or Directories Accessible to External Parties in ether/logsEPSS 1.1%CVE-2022-1585—Project Source Code Download <= 1.0.0 - Unauthenticated Backup DownloadEPSS 1.1%CVE-2024-52047HIGHA widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected instEPSS 1.1%CVE-2024-56731CRITICALGogs deletion of internal files allows remote command executionEPSS 1.1%CVE-2018-10867—Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove anEPSS 1.1%CVE-2021-24154—Theme Editor < 2.6 - Authenticated Arbitrary File DownloadEPSS 1.1%CVE-2018-1079HIGHpcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of tEPSS 1.1%CVE-2018-10863—It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/storeEPSS 1.1%CVE-2023-27180HIGHGDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/baEPSS 1.1%CVE-2024-48019MEDIUMApache Doris: allows admin users to read arbitrary files through the REST APIEPSS 1.0%CVE-2026-29066MEDIUMArbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLIEPSS 1.0%CVE-2022-29447MEDIUMWordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerabilityEPSS 1.0%CVE-2022-29446MEDIUMWordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerabilityEPSS 1.0%CVE-2022-47950MEDIUMAn issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticatedEPSS 1.0%CVE-2023-6375MEDIUMTyler Technologies Magistrate Court Case Management Plus stores backups insecurelyEPSS 1.0%CVE-2021-32008CRITICALLogged-in Administrator may get unrestricted file system accessEPSS 1.0%CVE-2021-31850MEDIUMDenial of Service in Database Security on WindowsEPSS 1.0%CVE-2024-49359HIGHZimaOS vulnerable to Directory Listing via Parameter ManipulationEPSS 1.0%