Class weakness
Draft
CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
1,599
Recorded CVEs
With this primary weakness
19
KEVs
In the CISA KEV catalog
Medium
Likelihood of exploit
Per MITRE
Class
Abstraction
MITRE classification
Overview
CWE-269 (Improper Privilege Management) is a class-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.