Falhas do tipo CWE-552

398 resultados

Arquivos ou diretórios acessíveis a terceiros

A aplicação ou servidor expõe arquivos ou diretórios com permissões insuficientes, permitindo que usuários não autorizados (locais ou remotos) leiam, modifiquem ou executem conteúdo sensível. O risco varia desde exposição de dados confidenciais até execução de código malicioso, dependendo do que está exposto e das permissões concedidas.

Exemplo

Um servidor web servindo a pasta /uploads com permissões 777, onde backup de banco de dados ou chaves privadas ficam armazenadas. Qualquer pessoa com acesso à rede (ou internet, se o servidor estiver exposto) consegue baixar esses arquivos. Outro cenário: arquivo de configuração com credenciais legível por todos em /etc/app/config.txt.

Como mitigar

Implemente o princípio do menor privilégio: defina permissões de arquivo e diretório restritivas (ex: 640, 750), revise listas de controle de acesso (ACLs), separe dados sensíveis de diretórios servidos publicamente, e audite regularmente permissões em produção usando ferramentas de varredura (find, stat, ou análise de ACLs).

CVE-2025-1042MEDIUMFiles or Directories Accessible to External Parties in GitLabEPSS 0.4%CVE-2017-15104—An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the HeEPSS 0.4%CVE-2023-22858MEDIUMStored cross-site scripting in BlogEngine.NET version 3.3.8.0EPSS 0.4%CVE-2024-4981HIGHPagure: _update_file_in_git() follows symbolic links in temporary clonesEPSS 0.4%CVE-2025-22369HIGHMennekes smart/premium charges systems, Arbitrary file download using ReadFile endpointEPSS 0.4%CVE-2024-8535MEDIUMAuthenticated user can access unintended user capabilitiesEPSS 0.4%CVE-2026-73736MEDIUMUnauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric ComposerEPSS 0.4%CVE-2026-123197MEDIUMWPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /filesEPSS 0.4%CVE-2017-2621MEDIUMAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory wEPSS 0.4%CVE-2026-31215CRITICALThe nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. TEPSS 0.4%CVE-2021-20253—A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilEPSS 0.4%CVE-2024-47106MEDIUMIBM Jazz for Service Management information disclosureEPSS 0.4%CVE-2026-76531CRITICALFiles or Directories Accessible to External Parties in Splunk SOAREPSS 0.4%CVE-2025-5273HIGHVersions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the geEPSS 0.4%CVE-2024-6878CRITICALDirectory Browsing in Eliz Software's PanelEPSS 0.4%CVE-2024-38429HIGHMatrix - CWE-552: Files or Directories Accessible to External PartiesEPSS 0.4%CVE-2026-54457HIGHTensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpointEPSS 0.4%CVE-2026-31216CRITICALThe nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. The DEPSS 0.4%CVE-2026-112948MEDIUMVitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token fileEPSS 0.4%CVE-2019-25239HIGHV-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration DownloadEPSS 0.4%