Skip to content
OpenAdvisories

Weakness (CWE)

CWE-269: Improper Privilege Management

Class Draft Mapping discouraged

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

How to prevent it (3 mitigations)

  1. Architecture and Design, Operation

    Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

  2. Architecture and Design

    Follow the principle of least privilege when assigning access rights to entities in a software system.

  3. Architecture and Design

    Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Source: MITRE CWE-269

All Critical High Medium Low Exploited only Public exploit

3,024 results · Feed