Umbra Wiki weakness weakness/CWE-560
Back to wiki

CWE-560 — Use of umask() with chmod-style Argument

provenance: imported · CWE: CWE-560

CWE-560: Use of umask() with chmod-style Argument

MITRE CWE weakness

Kind Weakness
Abstraction Variant
Status Draft
Likelihood of exploit

Description

The product calls umask() with an incorrect argument that is specified as if it is an argument to chmod().

Common consequences

  • Confidentiality, Integrity, Access Control: Read Files or Directories, Modify Files or Directories, Bypass Protection Mechanism

Mitigations

Implementation — Use umask() with the correct argument.

References

  • CWE page: https://cwe.mitre.org/data/definitions/560.html
  • CWE list: https://cwe.mitre.org/data/index.html