Common Weakness Enumeration

CWE-842 Placement of User into Incorrect Group

Description

The product or the administrator places a user into an incorrect group.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-842 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-fg3j-5w9g-hmg7 CVE-2026-6970 HIGH

authd: Primary group ID is incorrectly set to value of UID

2026-05-05
GHSA-4wjj-jwc9-2x96 CVE-2022-2989 HIGH

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

2025-06-05
GHSA-vr2x-7687-h6qv CVE-2023-25575 HIGH -

api-platform/core's secured properties may be accessible within collections

2023-03-01
GHSA-fjm8-m7m6-2fjp CVE-2022-2990 HIGH

Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

2022-09-16