Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

C detectors (38/38)

Logging of sensitive information Insecure Use Of Chroot Deadlock And Lock Inconsistency Unsafe File Extension Numeric Truncation Error OS command injection Incorrect Use Of Free Insecure Use strcat fn SQL injection Bitwise Operator On Signed Operand Insecure use gets fn Random fd exhaustion Hardcoded Credentials Redundant Free Usage Incorrect default Permissions Insecure Use Memset Divide By Zero.Return Stack Address Unchecked Return Value Incorrect Format Specifier Path traversal Improper Input Validation Improper Null Termination Out Of Bounds Read Integer Overflow Insecure use strtok function Improper size of a memory buffer Unused Assigned Variables incomplete-cleanup Null pointer dereference Insecure Temporary File Or Directory Insecure Buffer Access Incorrect Use Ato Fn Loose File Permissions Cross-site Scripting.Exposure of Sensitive Information Out-of-bounds Write String Equality

Incorrect default Permissions High

This vulnerability occurs when files or directories are created with overly permissive settings, allowing unauthorized access or modification. It poses a risk of data breaches or malicious tampering, as attackers can exploit weak permissions to view, alter, or delete sensitive information. Ensuring correct permissions, such as 0700, 0600, 0750, or 0640, mitigates this risk by restricting access only to authorized users. Properly configuring the umask also prevents unintentional exposure.

Detector ID

c/incorrect-default-permissions@v1.0

Category

Common Weakness Enumeration (CWE)

Tags