Skip to content
OpenAdvisories

Weakness (CWE)

CWE-269: Improper Privilege Management

Class Draft Mapping discouraged

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

How to prevent it (3 mitigations)

  1. Architecture and Design, Operation

    Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

  2. Architecture and Design

    Follow the principle of least privilege when assigning access rights to entities in a software system.

  3. Architecture and Design

    Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Source: MITRE CWE-269

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2024-8068 Exploited Public exploit

    Privilege escalation to NetworkService Account access

    Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

    Citrix Citrix Session Recording Network devices
    KEV Aug 25, 2025
  • Medium 4.4
    CVE-2021-25337 Exploited Public exploit

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted…

    Samsung Mobile Samsung Mobile Devices
    KEV Nov 8, 2022