Common Weakness Enumeration

CWE-282 Improper Ownership Management

Description

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-282 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-mmpc-xjxr-5hf8 CVE-2026-40214 MODERATE
pypi/openstack-cyborg

OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

 2026-05-13
GHSA-3fm2-hx3h-xm4v CVE-2025-67642 MODERATE
maven/com.datapipe.jenkins.plugins/hashicorp-vault-plugin

Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials

 2025-12-10