CWE-282

Improper Ownership Management

Class

Draft

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

Parent Weaknesses (ChildOf)

Scope

Access Control

Impact

Gain Privileges or Assume Identity

Architecture and Design

Operation

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

Program runs setuid root but relies on a configuration file owned by a non-root user.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.