Falhas do tipo CWE-552

398 resultados

Arquivos ou diretórios acessíveis a terceiros

A aplicação ou servidor expõe arquivos ou diretórios com permissões insuficientes, permitindo que usuários não autorizados (locais ou remotos) leiam, modifiquem ou executem conteúdo sensível. O risco varia desde exposição de dados confidenciais até execução de código malicioso, dependendo do que está exposto e das permissões concedidas.

Exemplo

Um servidor web servindo a pasta /uploads com permissões 777, onde backup de banco de dados ou chaves privadas ficam armazenadas. Qualquer pessoa com acesso à rede (ou internet, se o servidor estiver exposto) consegue baixar esses arquivos. Outro cenário: arquivo de configuração com credenciais legível por todos em /etc/app/config.txt.

Como mitigar

Implemente o princípio do menor privilégio: defina permissões de arquivo e diretório restritivas (ex: 640, 750), revise listas de controle de acesso (ACLs), separe dados sensíveis de diretórios servidos publicamente, e audite regularmente permissões em produção usando ferramentas de varredura (find, stat, ou análise de ACLs).

CVE-2026-34361CRITICALHAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token TheftEPSS 0.3%CVE-2025-64185MEDIUMOpen OnDemand RPM packages create world writable locationsEPSS 0.3%CVE-2025-12648MEDIUMWP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected FilesEPSS 0.3%CVE-2025-11959HIGHImproper Access Control in Premierturk's Excavation Management Information SystemEPSS 0.3%CVE-2026-120501MEDIUMAn Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable srcEPSS 0.3%CVE-2021-21429MEDIUMCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven pluginEPSS 0.3%CVE-2025-14896HIGHdue to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker caEPSS 0.3%CVE-2025-4634MEDIUMLocal File InclusionEPSS 0.3%CVE-2025-59976HIGHJunos Space: Arbitrary file download vulnerability in web interfaceEPSS 0.3%CVE-2026-42063MEDIUMiControl SOAP vulnerabilityEPSS 0.3%CVE-2026-94375MEDIUMOrder Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()EPSS 0.3%CVE-2024-7107MEDIUMDirectory Traversal in National Keep's CyberMathEPSS 0.3%CVE-2026-14849LOWPaid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export FilesEPSS 0.3%CVE-2025-12894MEDIUMImport WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information ExposureEPSS 0.3%CVE-2026-5335MEDIUMMagic Export & Import < 1.2.0 - Unauthenticated PII DisclosureEPSS 0.3%CVE-2020-3476MEDIUMCisco IOS XE Software Arbitrary File Overwrite VulnerabilityEPSS 0.3%CVE-2026-45543MEDIUMNextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files shareEPSS 0.3%CVE-2026-77884HIGHGallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposureEPSS 0.3%CVE-2023-32684LOWIn Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing fileEPSS 0.3%CVE-2026-84172MEDIUMApache Wicket: Component markup is served as a package resource when wicket-core has its own class loaderEPSS 0.3%