CWE-273: Improper Check for Dropped Privileges
BaseIncompleteExploit Likelihood: Medium
The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
View on MITREBack to CWE Lookup
Extended Description
If the drop fails, the product will continue to run with the raised privileges, which might provide additional access to unprivileged users.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific