logo

CWE-277 - Insecure Inherited Permissions

  • Abstraction:Variant
  • Structure:Simple
  • Status:Draft
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Insecure Inherited Permissions

Description

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

Common Consequences

Scope: Confidentiality, Integrity

Impact: Read Application Data, Modify Application Data

Related Weaknesses