CWE-286—Incorrect User Management

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-286
摘要：
Class
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Incorrect User Management

描述

The product does not properly manage a user within its environment.

Users can be assigned to the wrong group (class) of permissions resulting in unintended access rights to sensitive objects.

常见后果

范围：
Other
影响：
Varies by Context

相关 CWE

browse all CWEs