Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-732 (关键资源的不正确权限授予) — Vulnerability Class 443

443 vulnerabilities classified as CWE-732 (关键资源的不正确权限授予). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2019-13321 Xiaomi Mi6 Browser 安全漏洞 — Browser 8.0 -2020-02-10
CVE-2019-3683 keystone_json_assignment backend granted access to any project for users in user-project-map.json — SUSE Openstack Cloud 8 8.8 High2020-01-17
CVE-2019-19341 Ansible Tower 安全漏洞 — Tower 5.5 -2019-12-19
CVE-2019-3866 openstack-mistral 日志信息泄露漏洞 — openstack-mistral 5.5 -2019-11-08
CVE-2019-14824 Red Hat 389 Directory Server deref插件资源管理错误漏洞 — 389-ds-base 4.3 -2019-11-08
CVE-2019-5642 MAGICK — Metasploit Pro 3.3 Low2019-11-06
CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions — Junos OS 6.6 Medium2019-10-09
CVE-2019-3765 Dell EMC Integrated Data Protection Appliance和Dell EMC Avamar Server 安全漏洞 — Avamar 7.3 -2019-10-09
CVE-2019-2389 Process termination via PID file manipulation — MongoDB Server 5.3 Medium2019-08-30
CVE-2019-10132 Red Hat libvirt 权限许可和访问控制问题漏洞 — libvirt 8.8 -2019-05-22
CVE-2019-3893 Foreman 信息泄露漏洞 — foreman 6.5 -2019-04-09
CVE-2016-2121 Redis Labs Redis 权限许可和访问控制问题漏洞 — redis 5.5 -2018-10-31
CVE-2018-17892 NUUO CMS 安全漏洞 — NUUO CMS 8.8 -2018-10-12
CVE-2018-14650 sos-collector 安全漏洞 — sos-collector 5.0 -2018-09-27
CVE-2016-8637 Dracut 信息泄露漏洞 — dracut 7.8 -2018-08-01
CVE-2017-2590 Red Hat FreeIPA 安全漏洞 — ipa 8.1 -2018-07-27
CVE-2017-12167 Red Hat JBoss Enterprise Application Platform 信息泄露漏洞 — EAP-7 3.3 -2018-07-26
CVE-2016-9604 Linux kernel 安全漏洞 — security 4.4 -2018-07-11
CVE-2012-0433 insecure permissions on files containing confidential data — crowbar 5.5 -2018-06-08
CVE-2018-1115 PostgreSQL adminpack扩展配置错误漏洞 — postgresql 8.2 -2018-05-10
CVE-2017-12713 Advantech WebAccess 安全漏洞 — Advantech WebAccess 7.8 -2017-08-30
CVE-2017-8449 Elastic X-Pack Security 信息泄露漏洞 — Elastic X-Pack Security 6.5 -2017-06-16
CVE-2017-8450 Elastic X-Pack 信息泄露漏洞 — Elastic X-Pack Security 7.5 -2017-06-16

Vulnerabilities classified as CWE-732 (关键资源的不正确权限授予) represent 443 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.