Skip to content
OpenAdvisories

Weakness (CWE)

CWE-283: Unverified Ownership

Base Draft

The product does not properly verify that a critical resource is owned by the proper entity.

How to prevent it (2 mitigations)

  1. Architecture and Design, Operation

    Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

  2. Architecture and Design

    Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Source: MITRE CWE-283

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.