Common Weakness Enumeration
CWE-278 Insecure Preserved Inherited Permissions
Description
A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-278 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-jf86-9434-f8c2 | CVE-2019-14910 | CRITICAL |
Keycloak Authentication Error |
2023-09-26 | |
| GHSA-j3xp-wfr4-hx87 | CVE-2023-38497 | HIGH | - |
Cargo not respecting umask when extracting crate archives |
2023-08-03 |