Weaknesses in this category are related to improper assignment or handling of permissions.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 699 | Software Development |
| HasMember | Allowed | B | 276 | Incorrect Default Permissions |
| HasMember | Allowed | V | 277 | Insecure Inherited Permissions |
| HasMember | Allowed | V | 278 | Insecure Preserved Inherited Permissions |
| HasMember | Allowed | V | 279 | Incorrect Execution-Assigned Permissions |
| HasMember | Allowed | B | 280 | Improper Handling of Insufficient Permissions or Privileges |
| HasMember | Allowed | B | 281 | Improper Preservation of Permissions |
| HasMember | Allowed | V | 618 | Exposed Unsafe ActiveX Method |
| HasMember | Allowed | B | 766 | Critical Data Element Declared Public |
| HasMember | Allowed | B | 767 | Access to Critical Private Variable via Public Method |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Consider mapping to weaknesses that are members of this Category.
Permissions are associated with a resource and specify which actors are allowed to access that resource and what they are allowed to do with that access (e.g., read it, modify it). Privileges are associated with an actor and define which behaviors or actions an actor is allowed to perform.
N/A
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| PLOVER | N/A | N/A | Permission errors |
| OWASP Top Ten 2004 | A2 | CWE More Specific | Broken Access Control |
| OWASP Top Ten 2004 | A10 | CWE More Specific | Insecure Configuration Management |