Common Weakness Enumeration

CWE-279 Incorrect Execution-Assigned Permissions

Description

While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-279 ordered by modification date.

6 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-pwhc-rpq9-4c8w	CVE-2024-25621	HIGH	golang/github.com/containerd/containerd golang/github.com/containerd/containerd/v2	containerd affected by a local privilege escalation via wide permissions on CRI directory	2025-11-06
GHSA-6wwv-6mm3-pp76	CVE-2025-30001	HIGH	maven/org.apache.streampark/streampark	Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability	2025-11-05
GHSA-qc59-cxj2-c2w4	-	LOW	npm/aws-cdk-lib	aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role	2025-04-15
GHSA-pq7m-3gw7-gq5x	CVE-2022-21699	HIGH	pypi/ipython	Execution with Unnecessary Privileges in ipython	2024-09-27
GHSA-vc5p-j8vw-mc6x	CVE-2021-31155	HIGH	-	Permissions bypass in pleaser	2023-04-03
GHSA-jgcr-fg3g-qvw8	CVE-2021-29262	HIGH	maven/org.apache.solr/solr-core	Improper permission handling in Apache Solr	2021-05-07