675
The product does not preserve permissions or incorrectly preserves permissions when copying,
restoring, or sharing objects, which can cause them to have less restrictive permissions than
intended.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 732 Incorrect Permission Assignment for Critical Resource 1551
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 732 Incorrect Permission Assignment for Critical Resource 1551
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 275 Permission Issues 2317
Weakness Ordinalities
Resultant : This is resultant from errors that prevent the permissions from being preserved.
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Read Application Data
Modify Application Data
Observed Examples
Reference Description
CVE-2002-2323 Incorrect ACLs used when restoring backups from directories that use
symbolic links.
https://www.cve.org/CVERecord?id=CVE-2002-2323
CVE-2001-1515 Automatic modification of permissions inherited from another file system.
https://www.cve.org/CVERecord?id=CVE-2001-1515
CVE-2005-1920 Permissions on backup file are created with defaults, possibly less secure than
original file.
https://www.cve.org/CVERecord?id=CVE-2005-1920
CVE-2001-0195 File is made world-readable when being cloned.
https://www.cve.org/CVERecord?id=CVE-2001-0195
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
CWE Version 4.14
CWE-282: Improper Ownership Management
CWE-282: Improper Ownership Management