CWE-560: Use of umask() with chmod-style Argument
Description
The product calls umask() with an incorrect argument that is specified as if it is an argument to chmod().
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- ConfidentialityIntegrityAccess Control
Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
Potential mitigations
- Implementation
Use umask() with the correct argument.
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.