Falhas do tipo CWE-552

362 resultados

Arquivos ou diretórios acessíveis a terceiros

A aplicação ou servidor expõe arquivos ou diretórios com permissões insuficientes, permitindo que usuários não autorizados (locais ou remotos) leiam, modifiquem ou executem conteúdo sensível. O risco varia desde exposição de dados confidenciais até execução de código malicioso, dependendo do que está exposto e das permissões concedidas.

Exemplo

Um servidor web servindo a pasta /uploads com permissões 777, onde backup de banco de dados ou chaves privadas ficam armazenadas. Qualquer pessoa com acesso à rede (ou internet, se o servidor estiver exposto) consegue baixar esses arquivos. Outro cenário: arquivo de configuração com credenciais legível por todos em /etc/app/config.txt.

Como mitigar

Implemente o princípio do menor privilégio: defina permissões de arquivo e diretório restritivas (ex: 640, 750), revise listas de controle de acesso (ACLs), separe dados sensíveis de diretórios servidos publicamente, e audite regularmente permissões em produção usando ferramentas de varredura (find, stat, ou análise de ACLs).

CVE-2022-2392—Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File DownloadEPSS 1.1%CVE-2023-1124HIGHShopping Cart & eCommerce Store < 5.4.3 - Admin+ LFIEPSS 1.1%CVE-2018-1079HIGHpcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of tEPSS 1.1%CVE-2021-32752HIGHFiles or Directories Accessible to External Parties in ether/logsEPSS 1.1%CVE-2022-1585—Project Source Code Download <= 1.0.0 - Unauthenticated Backup DownloadEPSS 1.1%CVE-2024-52047HIGHA widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected instEPSS 1.1%CVE-2024-56731CRITICALGogs deletion of internal files allows remote command executionEPSS 1.1%CVE-2018-10867—Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove anEPSS 1.1%CVE-2021-24154—Theme Editor < 2.6 - Authenticated Arbitrary File DownloadEPSS 1.1%CVE-2018-10863—It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/storeEPSS 1.1%CVE-2023-27180HIGHGDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/baEPSS 1.1%CVE-2024-48019MEDIUMApache Doris: allows admin users to read arbitrary files through the REST APIEPSS 1.0%CVE-2026-29066MEDIUMArbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLIEPSS 1.0%CVE-2022-29446MEDIUMWordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerabilityEPSS 1.0%CVE-2022-29447MEDIUMWordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerabilityEPSS 1.0%CVE-2022-47950MEDIUMAn issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticatedEPSS 1.0%CVE-2023-6375MEDIUMTyler Technologies Magistrate Court Case Management Plus stores backups insecurelyEPSS 1.0%CVE-2021-32008CRITICALLogged-in Administrator may get unrestricted file system accessEPSS 1.0%CVE-2021-31850MEDIUMDenial of Service in Database Security on WindowsEPSS 1.0%CVE-2024-49359HIGHZimaOS vulnerable to Directory Listing via Parameter ManipulationEPSS 1.0%