CWE-560

Use of umask() with chmod-style Argument

Medium

Description

The product calls umask() with an incorrect argument that is specified as if it is an argument to chmod().

Potential Impact

Confidentiality: Read Files or Directories

How to Fix

Implementation

Use umask() with the correct argument.

Detection Methods

Automated Static Analysis: If you suspect misuse of umask(), you can use grep to spot call instances of umask()....

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-560 vulnerabilities in your codebase.

Get Security Assessment