Weakness (CWE)
CWE-282: Improper Ownership Management
Class Draft
The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.
How to prevent it (1 mitigation)
-
Architecture and Design, Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
Source: MITRE CWE-282
1 result · Clear filters · Feed
-
Low 2.9
The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges …