CWE-281: Improper Preservation of Permissions, page 8

Filter

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

What the weakness is: CWE-281 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Ask an AI about CWE-281

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-281: Improper Preservation of Permissions and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/281.html and https://cve.bz/cve/cwe/281?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

7.8CVE-2001-0195EPSS 0.3%2001-03-26
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.