CWE-273
Overview
- CWE ID
- 273
- CWE Name
- Improper Check for Dropped Privileges
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The software attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
Extended Description
If the drop fails, the software will continue to run with the raised privileges, which might provide additional access to unprivileged users.