CWE-278 · 7 records

Insecure Preserved Inherited Permissions

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-2947No exploit	IBM i privilege escalationibm · i · CWE-278 pre-auth RCE	Critical9.8	—	0.4%	Apr 17, 2025
35Monitor	CVE-2024-36538No exploit	Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service accountchaos-mesh · chaos mesh · CWE-278	High8.8	—	0.5%	Jul 24, 2024
35Monitor	CVE-2024-37769No exploit	Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.b1ackc4t · 14finger · CWE-278	High8.8	—	0.4%	Jul 5, 2024
29Monitor	CVE-2023-38497Proof of concept	Cargo not respecting umask when extracting crate archivesrust-lang · cargo · CWE-278	High7.3	—	0.7%	Aug 4, 2023
29Monitor	CVE-2026-6265No exploit	Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2cerberusftp · ftp server · CWE-278 Local privilege escalation	High7.3	—	0.2%	Apr 27, 2026
26Monitor	CVE-2026-71477No exploit	mise: Incorrect file ownership, when installed by the root user using `install.sh`jdx · mise · CWE-278	Medium6.7	—	0.1%	Aug 18, 2026
14Monitor	CVE-2024-38531No exploit	Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible.nixos · nix · CWE-278	Low3.6	—	0.1%	Jun 28, 2024

CVE-2025-2947
39Monitor
IBM i privilege escalation
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
ibm · iApr 17, 2025
CVE-2024-36538
35Monitor
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account
HighCVSS 8.8No exploitEPSS 0%
chaos-mesh · chaos meshJul 24, 2024
CVE-2024-37769
35Monitor
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
HighCVSS 8.8No exploitEPSS 0%
b1ackc4t · 14fingerJul 5, 2024
CVE-2023-38497
29Monitor
Cargo not respecting umask when extracting crate archives
HighCVSS 7.3Proof of conceptEPSS 0%
rust-lang · cargoAug 4, 2023
CVE-2026-6265
29Monitor
Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
cerberusftp · ftp serverApr 27, 2026
CVE-2026-71477
26Monitor
mise: Incorrect file ownership, when installed by the root user using `install.sh`
MediumCVSS 6.7No exploitEPSS 0%
jdx · miseAug 18, 2026
CVE-2024-38531
14Monitor
Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible.
LowCVSS 3.6No exploitEPSS 0%
nixos · nixJun 28, 2024