CWE-708 — Incorrect Ownership Assignment
CWE-708: Incorrect Ownership Assignment
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
This may allow the resource to be manipulated by actors outside of the intended control sphere.
Common consequences
- Confidentiality, Integrity: Read Application Data, Modify Application Data
Mitigations
Policy — Periodically review the privileges and their owners.
References
- CWE page: https://cwe.mitre.org/data/definitions/708.html
- CWE list: https://cwe.mitre.org/data/index.html