CWE-265: Incorrect Privilege Assignment
Issues arise when privileges are mishandled or assigned incorrectly, granting entities unnecessary actions. For example, executing maintenance tasks with unnecessary privileges.
Summary
Issues within this particular aspect arise when privileges are mishandled, assigned incorrectly, or poorly managed. Privileges, which are attributes possessed by entities such as users, grant them the ability to carry out actions that would typically be restricted. An instance of this could involve privileges that enable an entity to execute maintenance tasks like restarting a computer.