2317
Summary
Weaknesses in this category occur with improper handling, assignment, or management of
privileges. A privilege is a property of an agent, such as a user. It lets the agent do things that
are not ordinarily allowed. For example, there are privileges which allow an agent to perform
maintenance functions such as restart a computer.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 243 Creation of chroot Jail Without Changing Working
Directory
699 589
HasMember 250 Execution with Unnecessary Privileges 699 599
HasMember 266 Incorrect Privilege Assignment 699 638
HasMember 267 Privilege Defined With Unsafe Actions 699 641
HasMember 268 Privilege Chaining 699 644
HasMember 270 Privilege Context Switching Error 699 651
HasMember 272 Least Privilege Violation 699 656
HasMember 273 Improper Check for Dropped Privileges 699 660
HasMember 274 Improper Handling of Insufficient Privileges 699 663
HasMember 280 Improper Handling of Insufficient Permissions or
Privileges
699 672
HasMember 501 Trust Boundary Violation 699 1203
HasMember 580 clone() Method Without super.clone() 699 1311
HasMember 648 Incorrect Use of Privileged APIs 699 1428
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Privilege / sandbox errors
Notes
Relationship
This can strongly overlap authorization errors.
Theoretical
A sandbox could be regarded as an explicitly defined sphere of control, in that the sandbox only
defines a limited set of behaviors, which can only access a limited set of resources.
Theoretical
It could be argued that any privilege problem occurs within the context of a sandbox.
Research Gap
Many of the following concepts require deeper study. Most privilege problems are not classified
at such a low level of detail, and terminology is very sparse. Certain classes of software, such
as web browsers and software bug trackers, provide a rich set of examples for further research.
Operating systems have matured to the point that these kinds of weaknesses are rare, but finergrained
models for privileges, capabilities, or roles might introduce subtler issues.
Category-275: Permission Issues
Category ID : 275
CWE Version 4.14
CWE-310: Cryptographic Issues
CWE-310: Cryptographic Issues