CWE-276 - Incorrect Default Permissions

The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor.