An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
NVD-CWE-noinfo, CWE-284