CWE-278—Insecure Preserved Inherited Permissions

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-278
摘要：
Variant
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Insecure Preserved Inherited Permissions

描述

A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.

常见后果

范围：
Confidentiality, Integrity
影响：
Read Application Data, Modify Application Data

相关 CWE

browse all CWEs
相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →