Product changes the ownership of files that a
symlink points to, instead of the symlink
itself.
Potential Mitigations
Phase
Description
Periodically review the privileges and their owners.
Use automated tools to check for privilege settings.
Other Notes
This overlaps verification errors, permissions, and privileges.
A closely related weakness is the incorrect assignment of groups to a
resource. It is not clear whether it would fall under this entry or require
a different entry.
Description
