CWE-901 · Kategoria
SFP Primary Cluster: Privilege
- Status
- Niekompletny
- Dodano
- 22 marca 2012
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Privilege cluster (SFP36).
Wpisy w tej grupie
- CWE-250 Execution with Unnecessary Privileges
- CWE-266 Incorrect Privilege Assignment
- CWE-267 Privilege Defined With Unsafe Actions
- CWE-268 Privilege Chaining
- CWE-269 Improper Privilege Management
- CWE-270 Privilege Context Switching Error
- CWE-271 Privilege Dropping / Lowering Errors
- CWE-272 Least Privilege Violation
- CWE-274 Improper Handling of Insufficient Privileges
- CWE-520 .NET Misconfiguration: Use of Impersonation
- CWE-653 Improper Isolation or Compartmentalization
- CWE-9 J2EE Misconfiguration: Weak Access Permissions for EJB Methods
Wpis z katalogu CWE 4.20.