CWEweakness
CWE-842 Placement of User into Incorrect Group
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product or the administrator places a user into an incorrect group.
Common consequences
• Access Control: Gain Privileges or Assume Identity — If the incorrect group has more access or privileges than the intended group, the user might be able to bypass intended security policy to access unexpected resources or perform unexpected actions. The access-control system might not be able to detect malicious usage of this group membership.
Observed examples
• CVE-1999-1193: Operating system assigns user to privileged wheel group, allowing the user to gain root privileges.
• CVE-2010-3716: Chain: drafted web request allows the creation of users with arbitrary group membership.
• CVE-2008-5397: Chain: improper processing of configuration options causes users to contain unintended group memberships.
• CVE-2007-6644: CMS does not prevent remote administrators from promoting other users to the administrator group, in violation of the intended security model.
• CVE-2007-3260: Product assigns members to the root group, allowing escalation of privileges.
• CVE-2002-0080: Chain: daemon does not properly clear groups before dropping privileges.
Related
Observed example · CVE (6)
- CVE-2010-3716 The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a… vulnerability
- CVE-2008-5397 Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain… vulnerability
- CVE-2007-6644 Joomla! vulnerability
- CVE-2007-3260 HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root… vulnerability
- CVE-2002-0080 rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group… vulnerability
- CVE-1999-1193 The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become… vulnerability
Child of · CWE (1)
- CWE-286 Incorrect User Management weakness
Referenced by CVE · weakness (12)
- CVE-2026-102585 A flaw was found in Moodle. vulnerability
- CVE-2026-73439 On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is… vulnerability
- CVE-2026-6970 authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. vulnerability
- CVE-2024-10082 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. vulnerability
- CVE-2024-9412 An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign… vulnerability
- CVE-2024-25632 eLabFTW is an open source electronic lab notebook for research labs. vulnerability
- CVE-2023-25575 API Platform Core is the server component of API Platform: hypermedia and GraphQL APIs. vulnerability
- CVE-2022-45097 Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. vulnerability
- CVE-2022-3650 A privilege escalation flaw was found in Ceph. vulnerability
- CVE-2022-2989 An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or… vulnerability
- CVE-2022-2990 An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or… vulnerability
- CVE-2022-31007 eLabFTW is an electronic lab notebook manager for research teams. vulnerability