CWE-842

Placement of User into Incorrect Group
AI Translation Available

The product or the administrator places a user into an incorrect group.

Status
incomplete
Abstraction
base

If the incorrect group has more access or privileges than the intended group, the user might be able to bypass intended security policy to access unexpected resources or perform unexpected actions. The access-control system might not be able to detect malicious usage of this group membership.

Common Consequences

access control
Impacts
gain privileges or assume identity

Potential Mitigations