CWE-283

Unverified Ownership

High

Description

The product does not properly verify that a critical resource is owned by the proper entity.

Potential Impact

How to Fix

Architecture and Design

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

Architecture and Design

Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-283 vulnerabilities in your codebase.

Get Security Assessment