CWE-265 카테고리 상세 정보

CWE-265

Privilege Issues
2006-07-19 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: Privilege Issues

Weaknesses in this category occur with improper handling, assignment, or management of privileges. A privilege is a property of an agent, such as a user. It lets the agent do things that are not ordinarily allowed. For example, there are privileges which allow an agent to perform maintenance functions such as restart a computer.

CWE 구성원 목록

CWE-243: Creation of chroot Jail Without Changing Working Directory 기본

CWE-250: Execution with Unnecessary Privileges 기본

CWE-266: Incorrect Privilege Assignment 기본

CWE-267: Privilege Defined With Unsafe Actions 기본

CWE-268: Privilege Chaining 기본

CWE-270: Privilege Context Switching Error 기본

CWE-272: Least Privilege Violation 기본

CWE-273: Improper Check for Dropped Privileges 기본

CWE-274: Improper Handling of Insufficient Privileges 기본

CWE-280: Improper Handling of Insufficient Permissions or Privileges 기본

CWE-501: Trust Boundary Violation 기본

CWE-580: clone() Method Without super.clone() 기본

CWE-648: Incorrect Use of Privileged APIs 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름 조직 날짜 출시일 Version
PLOVER 2006-07-19 +00:00 2006-07-19 +00:00 Draft 3

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2008-09-08 +00:00 updated Description, Relationships, Relationship_Notes, Taxonomy_Mappings, Theoretical_Notes
CWE Content Team MITRE 2008-10-14 +00:00 updated Description, Research_Gaps, Theoretical_Notes
CWE Content Team MITRE 2009-12-28 +00:00 updated Potential_Mitigations
CWE Content Team MITRE 2010-06-21 +00:00 updated Potential_Mitigations
CWE Content Team MITRE 2011-03-29 +00:00 updated Relationships
CWE Content Team MITRE 2012-10-30 +00:00 updated Potential_Mitigations
CWE Content Team MITRE 2014-07-30 +00:00 updated Detection_Factors
CWE Content Team MITRE 2017-11-08 +00:00 updated Detection_Factors, Potential_Mitigations, Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Description, Name, Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.