CWE-708: Incorrect Ownership Assignment
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
A kind of CWE-282 Improper Ownership Management.
From the CWE List. © The MITRE Corporation.
Newest
- nixos nix The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user ... 4.0 Medium
- postgresql PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership 3.8 Low
- sysadminsmedia homebox HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation 8.1 High
- canonical juju Timing ownership claim attack on new external back-end secrets 5.3 Medium
- canonical apport Ubuntu Apport Insecure File Permissions Vulnerability 1.9 Low
- knime business hub Jobs can be saved as workflows with wrong permissions on KNIME Business Hub 5.3 Medium
- gitlab Incorrect Ownership Assignment in GitLab 3.5 Low
- parallels desktop for mac, desktop +1 more A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop... 7.8 High
-
lemmy_servercrates.io Lemmy user purging users or communities or banning users can delete images they didn't upload/exclusively use 6.9 Medium - zoom communications, inc apps for macos, zoom meeting software development kit, rooms +2 more +4 more Zoom Apps for macOS - Uncontrolled Resource Consumption 6.0 Medium
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 more Zoom Workplace Apps - Incorrect Ownership Assignment 4.9 Medium
- gitlab Incorrect Ownership Assignment in GitLab 3.1 Low
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular +1 more Incorrect file ownership of privileged service's libraries in Enel X JuiceBox 6.7 Medium
- ibm global configuration management IBM Global Configuration Management incorrect ownership assignment 6.5 Medium
- vantage6 Deleting a collaboration should also delete linked resources 3.7 Low
- gitlab Incorrect Ownership Assignment in GitLab 5.3 Medium
- cisco cx cloud agent A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to... 6.7 Medium
- cisco cx cloud agent A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to... 6.7 Medium
- openvpn access server The OpenVPN Access Server installer creates a log file readable for everyone, which from version... 7.5 High
- juniper contrail service orchestration Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication 7.3 High
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 more Philips MRI 1.5T and 3T Incorrect Ownership Assignment 5.9 Medium
- nextcloud server, kiteworks security-advisories +1 more Webauthn tokens not removed after user has been deleted 7.1 High
- nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk not properly disassociating users from chats after account deletion 8.1 High