Permission Issues

Opis

Weaknesses in this category are related to improper assignment or handling of permissions.

Wpisy w tej grupie

• CWE-276 Incorrect Default Permissions
• CWE-277 Insecure Inherited Permissions
• CWE-278 Insecure Preserved Inherited Permissions
• CWE-279 Incorrect Execution-Assigned Permissions
• CWE-280 Improper Handling of Insufficient Permissions or Privileges
• CWE-281 Improper Preservation of Permissions
• CWE-618 Exposed Unsafe ActiveX Method
• CWE-766 Critical Data Element Declared Public
• CWE-767 Access to Critical Private Variable via Public Method

Uwagi

Permissions are associated with a resource and specify which actors are allowed to access that resource and what they are allowed to do with that access (e.g., read it, modify it). Privileges are associated with an actor and define which behaviors or actions an actor is allowed to perform.

Źródła