CWE-708—Incorrect Ownership Assignment

PUBLISHEDweakness record
released 2008-09-09 · last modified 2025-12-11

Metadata

CWE ID：
CWE-708
摘要：
Base
结构：
Simple
状态：
Incomplete
发布日期：
2008-09-09
更新日期：
2025-12-11

名称

Incorrect Ownership Assignment

描述

The product assigns an owner to a resource, but the owner is outside of the intended control sphere.

This may allow the resource to be manipulated by actors outside of the intended control sphere.

常见后果

范围：
Confidentiality, Integrity
影响：
Read Application Data, Modify Application Data
注释：
An attacker could read and modify data for which they do not have permissions to access directly.

相关 CWE

browse all CWEs