CWEweakness

CWE-708 Incorrect Ownership Assignment

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product assigns an owner to a resource, but the owner is outside of the intended control sphere.

Common consequences

• Confidentiality, Integrity: Read Application Data, Modify Application Data — This may allow the resource to be manipulated by actors outside of the intended control sphere. An attacker could read and modify data for which they do not have permissions to access directly.

Potential mitigations

• [Policy] Periodically review the privileges and their owners.

Detection methods

• Automated Analysis: Use automated tools to check for privilege settings.

Observed examples

• CVE-2024-43199: product installs binaries with potentially insecure user/group ownership • CVE-2007-5101: File system sets wrong ownership and group when creating a new file. • CVE-2007-4238: OS installs program with bin owner/group, allowing modification. • CVE-2007-1716: Manager does not properly restore ownership of a reusable resource when a user logs out, allowing privilege escalation. • CVE-2005-3148: Backup software restores symbolic links with incorrect uid/gid. • CVE-2005-1064: Product changes the ownership of files that a symlink points to, instead of the symlink itself. • CVE-2011-1551: Component assigns ownership of sensitive directory tree to a user account, which can be leveraged to perform privileged operations.

Related

Observed example · CVE (7)

  • CVE-2024-43199 Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned by the nagios user. vulnerability
  • CVE-2011-1551 SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local… vulnerability
  • CVE-2007-5101 ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which… vulnerability
  • CVE-2007-4238 AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to… vulnerability
  • CVE-2007-1716 pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one… vulnerability
  • CVE-2005-3148 StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2)… vulnerability
  • CVE-2005-1064 The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the… vulnerability

Can also be · CWE (1)

  • CWE-345 Insufficient Verification of Data Authenticity weakness

Child of · CWE (1)

  • CWE-282 Improper Ownership Management weakness

Referenced by CVE · weakness (22)

  • CVE-2026-110452 The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it… vulnerability
  • CVE-2026-6469 Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the… vulnerability
  • CVE-2026-40196 HomeBox is a home inventory and organization system. vulnerability
  • CVE-2026-32691 A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim… vulnerability
  • CVE-2025-5467 It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect… vulnerability
  • CVE-2025-14262 A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there… vulnerability
  • CVE-2025-5069 An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1… vulnerability
  • CVE-2024-52561 A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). vulnerability
  • CVE-2024-45417 Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct… vulnerability
  • CVE-2024-45426 Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network… vulnerability
  • CVE-2024-9633 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5… vulnerability
  • CVE-2023-29122 Under certain conditions, access to service libraries is granted to account they should not have access to. vulnerability
  • CVE-2024-41773 IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access… vulnerability
  • CVE-2023-41881 vantage6 is privacy preserving federated learning infrastructure. vulnerability
  • CVE-2023-4008 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1… vulnerability
  • CVE-2023-20043 A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. vulnerability
  • CVE-2023-20044 A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. vulnerability
  • CVE-2022-33737 The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a… vulnerability
  • CVE-2022-22189 An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated… vulnerability
  • CVE-2021-26248 Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized… vulnerability
  • CVE-2021-32689 Nextcloud Talk is a fully on-premises audio/video and chat communication service. vulnerability
  • CVE-2021-32726 Nextcloud Server is a Nextcloud package that handles data storage. vulnerability

Referenced by CWE · has member (1)