Skip to main content

Incorrect Default Permissions

CVE-2021-31217

High
9.4/10

Summary

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.

  • LOW
  • NETWORK
  • NONE
  • COMPLETE
  • NONE
  • COMPLETE

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

  • Published