Advisories · Weakness
CWE-278.
Every Advisory and CVE whose sources give the weakness CWE-278, newest first.
- CVSS 6.7 Medium
mise: Incorrect file ownership, when installed by the root user using `install.sh`
- jdx mise
- CWE-278
- CVSS 7.3 High
Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
- Cerberus FTP Server
- CWE-278
- CVSS 7.2 High
IBM i privilege escalation
- i
- CWE-278
- CVSS 8.8 High
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
- CWE-278
- CVSS 8.8 High
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
- CWE-278
- CVSS 3.6 Low
Nix sandbox escape
- nix
- CWE-278
- CVSS 7.8 High
Cargo not respecting umask when extracting crate archives
- Broken access control
- CWE-278
<0.72.2 · fixed in 0.72.2
GHSA-j3xp-wfr4-hx87 · CVE-2023-38497 - CVSS 9.3 CriticalCritical · CVSS 9+
Keycloak Authentication Error
- Authentication bypass
- Weak cryptography or TLS
>=7.0.0, <=7.0.1 · no fixed version yet
GHSA-jf86-9434-f8c2 · CVE-2019-14910