CWE-283

Unverified Ownership

Base

Draft

The product does not properly verify that a critical resource is owned by the proper entity.

Parent Weaknesses (ChildOf)

Scope

Access Control

Impact

Gain Privileges or Assume Identity

Architecture and Design

Operation

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

Architecture and Design

Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Program does not verify the owner of a UNIX socket that is used for sending a password.

Owner of special device not checked, allowing root.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.