COMMON WEAKNESS ENUMERATIONIncomplete

CWE-708

Incorrect Ownership Assignment

The product assigns an owner to a resource, but the owner is outside of the intended control sphere.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product assigns an owner to a resource, but the owner is outside of the intended control sphere.

Genişletilmiş açıklama

This may allow the resource to be manipulated by actors outside of the intended control sphere.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Yaşam döngüsü evresi

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Read Application DataModify Application Data

Etkilenen güvenlik alanları: Confidentiality, Integrity

An attacker could read and modify data for which they do not have permissions to access directly.

Savunma

Nasıl önlenir ve çözülür?

Policy

Policy aşaması savunması

Detay
Periodically review the privileges and their owners.

Doğrulama

Nasıl tespit edilir?

Automated Analysis

Use automated tools to check for privilege settings.