logo
Home/CWEs/CWE-278/

CWE-278 - Insecure Preserved Inherited Permissions

  • Abstraction:Variant
  • Structure:Simple
  • Status:Incomplete
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Insecure Preserved Inherited Permissions

Description

A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.

Common Consequences

Scope: Confidentiality, Integrity

Impact: Read Application Data, Modify Application Data

Related Weaknesses

CWE-732Incorrect Permission Assignment for Critical ResourceHigh