Fallos del tipo CWE-732

791 resultados

Permissões inadequadas em recurso crítico de segurança

A aplicação ou sistema define permissões de arquivo, diretório ou recurso de forma muito permissiva, permitindo que usuários não autorizados leiam ou modifiquem dados sensíveis. Isso expõe segredos (chaves API, senhas, tokens), permite alteração de configurações críticas ou compromete a integridade do sistema.

Ejemplo

Um arquivo de configuração contendo credenciais de banco de dados é criado com permissões 644 (leitura global) em vez de 600, permitindo que qualquer usuário do sistema leia as credenciais. Ou um diretório com chaves privadas SSH é criado com permissões 777, deixando-o acessível e modificável por todos.

Cómo mitigar

Defina permissões restritivas no momento da criação (umask 0077 para arquivos sensíveis, chmod 600 para segredos). Revise e audite permissões de recursos críticos regularmente, especialmente após deploy. Use controle de acesso baseado em papéis (RBAC) e aplique o princípio do menor privilégio.

CVE-2026-32315MEDIUMmotionEye: World-Readable Configuration File Exposes Admin Password HashEPSS 2.9%CVE-2025-10643CRITICALWondershare Repairit Incorrect Permission Assignment Authentication Bypass VulnerabilityEPSS 2.8%CVE-2018-17892—NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security featuEPSS 2.8%CVE-2018-11116HIGHOpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call aEPSS 2.4%CVE-2021-43359HIGHSunnet eHRD - Broken Access ControlEPSS 2.4%CVE-2022-32777HIGHAn information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cEPSS 2.4%CVE-2022-32778HIGHAn information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cEPSS 2.4%CVE-2018-7311HIGHPrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability. The software installs a privileged helper tool that runsEPSS 2.2%CVE-2021-43019HIGHAdobe Creative Cloud Incorrect Permission Assignment Privilege Escalation VulnerabilityEPSS 2.2%CVE-2023-25438HIGHAn issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalated privileges via moEPSS 2.1%CVE-2020-17415HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker musEPSS 2.1%CVE-2020-17414HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must fiEPSS 1.9%CVE-2025-34288HIGHNagios XI Privilege Escalation via Writable PHP Include Executed with SudoEPSS 1.9%CVE-2019-3893MEDIUMIn Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the EPSS 1.8%CVE-2022-1348MEDIUMA vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple iEPSS 1.7%CVE-2024-7513HIGHRockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File PermissionsEPSS 1.7%CVE-2021-39235—Access mode of block tokens are not enforcedEPSS 1.6%CVE-2012-10030CRITICALFreeFloat FTP Server Arbitrary File UploadEPSS 1.5%CVE-2024-21305MEDIUMHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass VulnerabilityEPSS 1.5%CVE-2022-28802HIGHCode by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other wEPSS 1.4%