CWE-708
Incorrect Ownership Assignment
AI Translation Available
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
Status
incomplete
Abstraction
base
Affected Platforms
Extended Description
AI Translation
This may allow the resource to be manipulated by actors outside of the intended control sphere.
Technical Details
AI Translation
Common Consequences
confidentiality
integrity
Impacts
read application data
modify application data
Detection Methods
automated analysis
Potential Mitigations
Phases:
policy
Descriptions:
•
Periodically review the privileges and their owners.