Incorrect Execution-Assigned Permissions
CWE-279
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.
We track 12 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
How this weakness is prevented
- Architecture and Design Operation: Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
- Architecture and Design: Compartmentalize the system to have safe areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Latest Incorrect Execution-Assigned Permissions vulnerabilities
- 7.2 High severity
Cisco Secure Firewall Adaptive Security…: Incorrect Execution-Assigned Permissions
A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with administrative privileges in one context to copy files to or from another context, includi
- 8.5 High severity
Red Hat Ansible Automation Platform 2.5 for…: Incorrect Execution-Assigned Permissions
A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend serv
- 7.8 High severity
containerd: Incorrect Execution-Assigned Permissions
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/container
- 7.3 High severity
Apache StreamPark: Incorrect Execution-Assigned Permissions
Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue.
- 8.1 High severity
Coder allows organizations to provision remote development environments via Terraform.
Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder can be compromised through insecure session handling in prebuilt workspaces. Coder automatically generates a sess
- 7.6 High severity
DOCA-Host and Mellanox OFED: Incorrect Execution-Assigned Permissions
NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.
- 7.8 High severity
Edge Orchestrator software for Intel(R) Tiber™…: Incorrect Execution-Assigned Permissions
Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Open Automation Software: Incorrect Permission Assignment for Critical Resource
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in p
- 8.8 High severity
Saphira Connect: Incorrect Permission Assignment for Critical Resource
Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.
- 7.2 High severity
GitLab: Incorrect Permission Assignment for Critical Resource
An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. If an external user is given an owner role on any group, that exter
- 7.8 High severity
eScan Anti-Virus: Incorrect Permission Assignment for Critical Resource
A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approach
- 8.8 High severity
ipython: Improper Privilege Management
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not pr