Cyber Resilience

CWE · MITRE source

CWE-282Improper Ownership Management

Abstraction: Class · CVEs in our corpus: 28

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

Last updated: 04 July 2026 08:17 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 10 mapping(s) from 4 framework(s): ATT&CK 7 (partial) · OWASP-Web 1 (mostly) · CAPEC 1 (partial) · STIG windows server 2016 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A01:2025 Broken Access Control.

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial).

T1034 Path Interception←P →PT1222 File and Directory Permissions Modification←P →PT1543 Create or Modify System Process←P →PT1548 Abuse Elevation Control Mechanism←P →PT1554 Compromise Host Software Binary←P →PT1574 Hijack Execution Flow←P →PT1574.005 Executable Installer File Permissions Weakness→PT1574.010 Services File Permissions Weakness←P →P

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-0386 KEV10.07.80.07882023-03-22
CVE-2017-121895.57.80.00342018-01-10
CVE-2020-106325.58.80.00472022-02-24
CVE-2022-291875.57.80.00442022-07-12
CVE-2024-33835.57.40.00582024-04-10
CVE-2024-379995.57.80.00142024-07-08
CVE-2024-397555.57.80.00372024-10-03
CVE-2025-272545.58.00.00182025-03-10
CVE-2025-57732 UPD5.57.50.00112025-08-20
CVE-2026-235145.58.80.01042026-03-25
CVE-2022-00263.56.70.00222022-05-11
CVE-2023-09893.54.30.00432023-09-29
CVE-2023-72263.56.30.00432024-01-11
CVE-2024-451033.54.30.00342024-09-13
CVE-2024-451043.56.30.00202024-09-13
CVE-2024-89493.56.30.00722024-09-17
CVE-2024-478163.56.40.00322024-10-09
CVE-2024-431763.55.40.00272025-01-09
CVE-2024-132463.55.30.00262025-01-09
CVE-2024-132493.55.40.00212025-01-09
CVE-2025-329453.54.30.00272025-04-15
CVE-2025-329463.55.30.00312025-04-15
CVE-2025-3629 UPD3.54.30.00182025-06-21
CVE-2025-1112 UPD3.54.30.00192025-07-09
CVE-2025-676423.54.30.00192025-12-10