CWE-274

Improper Handling of Insufficient Privileges

Base

Draft

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

Parent Weaknesses (ChildOf)

Related Weaknesses

Scope

Other

Impact

Other, Alter Execution Logic

System limits are not properly enforced after privileges are dropped.

Firewall crashes when it can't read a critical memory block that was protected by a malicious process.

Does not give admin sufficient privileges to overcome otherwise legitimate user actions.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.