CWE-266
Overview
- CWE ID
- 266
- CWE Name
- Incorrect Privilege Assignment
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.