Weakness (CWE)

CWE-282: Improper Ownership Management

Class Draft

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

How to prevent it (1 mitigation)

Architecture and Design, Operation

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities w…