CWE-277Insecure Inherited Permissions

Description

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

Common consequences

• Confidentiality,Integrity→Read Application Data,Modify Application Data

Potential mitigations

• Architecture and Design,Operation
  Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
• Architecture and Design
  [object Object]

Related CWEs

Recent CVEs classified under this CWE