Falhas do tipo CWE-552

365 resultados

Arquivos ou diretórios acessíveis a terceiros

A aplicação ou servidor expõe arquivos ou diretórios com permissões insuficientes, permitindo que usuários não autorizados (locais ou remotos) leiam, modifiquem ou executem conteúdo sensível. O risco varia desde exposição de dados confidenciais até execução de código malicioso, dependendo do que está exposto e das permissões concedidas.

Exemplo

Um servidor web servindo a pasta /uploads com permissões 777, onde backup de banco de dados ou chaves privadas ficam armazenadas. Qualquer pessoa com acesso à rede (ou internet, se o servidor estiver exposto) consegue baixar esses arquivos. Outro cenário: arquivo de configuração com credenciais legível por todos em /etc/app/config.txt.

Como mitigar

Implemente o princípio do menor privilégio: defina permissões de arquivo e diretório restritivas (ex: 640, 750), revise listas de controle de acesso (ACLs), separe dados sensíveis de diretórios servidos publicamente, e audite regularmente permissões em produção usando ferramentas de varredura (find, stat, ou análise de ACLs).

CVE-2009-10005HIGHContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencodeEPSS 0.8%CVE-2024-48647HIGHA file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote attackers to retrieve arbitrary files from the EPSS 0.8%CVE-2023-23330HIGHamano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.EPSS 0.8%CVE-2022-44583HIGHWordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerabilityEPSS 0.8%CVE-2022-48161HIGHEasy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.php. This vulnerabilEPSS 0.8%CVE-2025-21264HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2022-44634MEDIUMWordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerabilityEPSS 0.8%CVE-2025-0620MEDIUMSamba: smbd doesn't pick up group membership changes when re-authenticating an expired smb sessionEPSS 0.7%CVE-2024-52292HIGHCraft Allows Attackers to Read Arbitrary System FilesEPSS 0.7%CVE-2023-39545—CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleEPSS 0.7%CVE-2024-27182MEDIUMApache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerabilityEPSS 0.7%CVE-2024-36442HIGHcgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the devicEPSS 0.7%CVE-2023-41916MEDIUMApache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file readingEPSS 0.7%CVE-2022-45227HIGHThe web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backEPSS 0.7%CVE-2022-45052HIGHLocal File Inclusion in Axiell Iguana CMSEPSS 0.7%CVE-2023-48710CRITICALiTop limit pages/exec.php script to PHP filesEPSS 0.7%CVE-2023-45160HIGHElevated Temp Directory Execution in 1E ClientEPSS 0.7%CVE-2025-41240CRITICALMounted Kubernetes Secrets under a predictable path located within the web server document rootEPSS 0.7%CVE-2023-33517HIGHcarRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).EPSS 0.7%CVE-2019-3811MEDIUMA vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead oEPSS 0.7%