CWE-732 — Incorrect Permission Assignment for Critical Resource

Abstraction: Class  |  Status: Draft
Description

Chain: database product contains buffer overflow that is only reachable through a .ini configuration file - which has "Everyone: Full Control" permissions.

Raw catalog entry
MITRE page
{
  "abstraction": "Class",
  "description": "Chain: database product contains buffer overflow that is only reachable through a .ini configuration file - which has \"Everyone: Full Control\" permissions.",
  "id": "CWE-732",
  "name": "Incorrect Permission Assignment for Critical Resource",
  "status": "Draft"
}
View JSON API Download JSON