CWEweakness
CWE-673 External Influence of Sphere Definition
- Abstraction
- Class
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product does not prevent the definition of control spheres from external actors.
Extended description
Typically, a product defines its control sphere within the code itself, or through configuration by the product's administrator. In some cases, an external party can change the definition of the control sphere.
Common consequences
• Other: Other
Observed examples
• CVE-2008-2613: setuid program allows compromise using path that finds and loads a malicious library.
Related
Observed example · CVE (1)
- CVE-2008-2613 Unspecified vulnerability in the Database Scheduler component in Oracle Database 10.2.0.4 and 11.1.0.6 has unknown impact and local attack… vulnerability
Child of · CWE (1)
- CWE-664 Improper Control of a Resource Through its Lifetime weakness
Referenced by CVE · weakness (1)
- CVE-2025-30075 In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they… vulnerability
Referenced by CWE · child of (1)
- CWE-426 Untrusted Search Path weakness