The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
1
cwe_id
732
name
Incorrect Permission Assignment for Critical Resource
description
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.