Advisories · Weakness
CWE-279.
Every Advisory and CVE whose sources give the weakness CWE-279, newest first.
- CVSS 4.4 Medium
osquery: Unprivileged users can temporarily read file carve contents
- osquery
- CWE-279
- CWE-378
- CVSS 5.5 Medium
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-279
- CVSS 7.2 High
Cisco Secure Firewall Adaptive Security Appliance (ASA)…: A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA)…
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CWE-279
- CVSS 6.5 Medium
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- CWE-279
- CVSS 8.5 High
Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- CWE-279
- CVSS 3.8 Low
Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
- IBM Aspera Faspex 5
- CWE-279
- CVSS 5.4 Medium
Quartus Prime Pro Edition Installer Advisory
- Altera Quartus Prime Pro
- CWE-279
- CVSS 7.3 High
containerd affected by a local privilege escalation via wide permissions on CRI directory
- CWE-279
<1.7.29 · fixed in 1.7.29
GHSA-pwhc-rpq9-4c8w · CVE-2024-25621 - CVSS 7.3 High
Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability
- CWE-279
<=2.1.5 · no fixed version yet
GHSA-6wwv-6mm3-pp76 · CVE-2025-30001 - CVSS 8.1 High
Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder
- Authentication bypass
- CWE-277
* · no fixed version yet
GHSA-j6xf-jwrj-v5qp · CVE-2025-58437 - CVSS 4.0 Medium
In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check.
- Google Android
- CWE-279
- CVSS 7.6 High
NVIDIA DOCA-Host and Mellanox OFED: NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature…
- NVIDIA DOCA-Host and Mellanox OFED
- CWE-279
- CVSS 5.1 Medium
Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CWE-279
- CVSS 8.8 High
Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CWE-279
- CVSS 5.1 Medium
Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R)…
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CWE-279
- CVSS 2.2 Low
aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role
- CWE-279
>=2.172.0, <2.189.1 · fixed in 2.189.1
GHSA-qc59-cxj2-c2w4 - CVSS 2.0 Low
Intel(R) 800 Series Ethernet Driver: Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R)…
- Intel(R) 800 Series Ethernet Driver
- CWE-279
- CVSS 8.5 High
Open Automation Software Incorrect Execution-Assigned Permissions
- Open Automation Software
- CWE-279
- CVSS 5.4 Medium
Intel(R) Advanced Link Analyzer Standard Edition software…: Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard…
- Intel(R) Advanced Link Analyzer Standard Edition software installer
- CWE-279
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.
- CWE-279
- CVSS 6.7 Medium
A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directori…
- CWE-279
- CVSS 8.8 High
Privilage Escalation in Saphira Connect
- Saphira Connect
- CWE-279
- CVSS 6.5 Medium
Incorrect Execution-Assigned Permissions in GitLab
- GitLab
- CWE-279
- CVSS 7.8 High
MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions
- MicroWorld eScan Anti-Virus
- CWE-279
- CVSS 8.2 High
Execution with Unnecessary Privileges in ipython
- Privilege escalation
- CWE-279
<5.11 || >=6.0.0, <7.16.3 || >=7.17.0, <7.31.1 || >=8.0.0, <8.0.1 · fixed in 5.11, 7.16.3, 7.31.1, 8.0.1
GHSA-pq7m-3gw7-gq5x · CVE-2022-21699 - CVSS 7.8 High
Permissions bypass in pleaser
- Privilege escalation
- CWE-279
<0.4.0 · fixed in 0.4.0
GHSA-vc5p-j8vw-mc6x · CVE-2021-31155 - CVSS 7.5 High
Improper permission handling in Apache Solr
- Hard-coded credentials
- CWE-279
<8.8.2 · fixed in 8.8.2
GHSA-jgcr-fg3g-qvw8 · CVE-2021-29262 - CVSS 6.1 Medium
outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 15-LTSS
- CWE-279
-
Elastic X-Pack Security: Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply…
- Elastic X-Pack Security
- CWE-279