CWE-280Improper Handling of Insufficient Permissions or Privileges

Description

Common consequences· 1

• Other — Other, Alter Execution Logic

Potential mitigations· 2

• [Architecture and Design]
• [Implementation]Always check to see if you have successfully accessed a resource or system functionality, and use proper error handling if it is unsuccessful. Do this even when you are operating in a highly privileged mode, because errors or environmental conditions might still cause a failure. For example, environments with highly granular permissions/privilege models, such as Windows or Linux capabilities, can cause unexpected failures.

(incoming)14

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.