CWE-269—Improper Privilege Management

PUBLISHEDweakness recordMedium
released 2006-07-19 · last modified 2026-04-30
CWE-269 - Improper Privilege Management - Diagram

Metadata

CWE ID：
CWE-269
摘要：
Class
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2026-04-30

名称

Improper Privilege Management

描述

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

常见后果

范围：
Access Control
影响：
Gain Privileges or Assume Identity

相关 CWE

browse all CWEs