CWE-671

• CWE ID
• 671

• CWE Name
• Lack of Administrator Control over Security

• CWE Abstraction
• Class

• CWE structure
• Simple

• CWE Status
• Draft

The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect the environment in which the product is being used. This introduces resultant weaknesses or prevents it from operating at a l

If the product's administrator does not have the ability to manage security-related decisions at all times, then protecting the product from outside threats - including the product's developer - can become impossible. For example, a hard-coded account nam