VariantDraft

CWE-560Use of umask() with chmod-style Argument

Category: other

Description

The product calls umask() with an incorrect argument that is specified as if it is an argument to chmod().

Common consequences· 1

  • Confidentiality / Integrity / Access Control — Read Files or Directories, Modify Files or Directories, Bypass Protection Mechanism

Potential mitigations· 1

  • [Implementation]Use umask() with the correct argument.

References

  1. https://cwe.mitre.org/data/definitions/560.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Incorrect Use of Privileged APIs
CWE
Incorrect Execution-Assigned Permissions
CWE
Incorrect Default Permissions
CWE
Use of Potentially Dangerous Function
CWE
UNIX Hard Link
CWE
Function Call with Incorrectly Specified Arguments
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.