Advisories · Weakness
CWE-708.
Every Advisory and CVE whose sources give the weakness CWE-708, newest first.
- CVSS 4.0 Medium
Nix: The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the…
- Nix
- CWE-708
- CVSS 3.8 Low
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
- PostgreSQL
- CWE-708
- CVSS 8.1 High
HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation
- sysadminsmedia homebox
- CWE-708
- CVSS 5.3 Medium
Juju affected by timing ownership claim attack on new external back-end secrets
- CWE-708
>=3.0.0, <3.6.19 · fixed in 3.6.19
GHSA-gfgr-6hrj-85ww · CVE-2026-32691 - CVSS 1.9 Low
Ubuntu Apport Insecure File Permissions Vulnerability
- Canonical apport
- CWE-708
- CVSS 5.3 Medium
Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
- KNIME Business Hub
- CWE-708
- CVSS 3.5 Low
Incorrect Ownership Assignment in GitLab
- GitLab
- CWE-708
- CVSS 7.8 High
Parallels Desktop for Mac: A privilege escalation vulnerability exists in the Snapshot functionality of Parallels…
- Parallels Desktop for Mac
- CWE-708
- CVSS 4.0, no score published
Lemmy user purging users or communities or banning users can delete images they didn't upload/exclusively use
- CWE-708
>=0.17.0, <0.19.11 · fixed in 0.19.11
GHSA-wr2m-38xh-rpc9 - CVSS 6.0 Medium
Zoom Apps for macOS - Uncontrolled Resource Consumption
- Zoom Communications, Inc Zoom Apps for macOS
- CWE-708
- CVSS 4.9 Medium
Zoom Workplace Apps - Incorrect Ownership Assignment
- Zoom Communications, Inc Zoom Workplace Apps
- CWE-708
- CVSS 3.1 Low
Incorrect Ownership Assignment in GitLab
- GitLab
- CWE-708
- CVSS 6.7 Medium
Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- CWE-708
- CVSS 6.5 Medium
IBM Global Configuration Management incorrect ownership assignment
- IBM Global Configuration Management
- CWE-708
- CVSS 3.7 Low
vantage6 does not properly delete linked resources when deleting a collaboration
- Information disclosure
- CWE-708
<4.0.0 · fixed in 4.0.0
GHSA-rf54-7qrr-96j6 · CVE-2023-41881 - CVSS 5.3 Medium
Incorrect Ownership Assignment in GitLab
- GitLab
- CWE-708
- CVSS 6.7 Medium
Cisco CX Cloud Agent: A vulnerability in Cisco CX Cloud Agent of could allow an authenticated…
- Cisco CX Cloud Agent
- CWE-708
- CVSS 6.7 Medium
Cisco CX Cloud Agent: A vulnerability in Cisco CX Cloud Agent of could allow an authenticated…
- Cisco CX Cloud Agent
- CWE-708
-
OpenVPN Access Server: The OpenVPN Access Server installer creates a log file readable for everyone…
- OpenVPN Access Server
- CWE-708
- CVSS 7.3 High
Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication
- Juniper Networks Contrail Service Orchestration
- Authentication bypass
- CWE-708
- CVSS 5.9 Medium
Philips MRI 1.5T and 3T Incorrect Ownership Assignment
- Philips MRI 1.5T
- Philips MRI 3T
- CWE-708
- CVSS 7.1 High
Webauthn tokens not removed after user has been deleted
- nextcloud security-advisories
- CWE-708
- CVSS 8.1 High
Nextcloud Talk not properly disassociating users from chats after account deletion
- nextcloud security-advisories
- Information disclosure
- CWE-708