Common Weakness Enumeration

    CWE Definition / CWE-243

    CWE-243: Creation of chroot Jail Without Changing Working Directory

    The product uses the chroot() system call to create a jail, but does not change the working directory afterward. This does not prevent access to files outside of the jail.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:29 Jun 2023

    Related Weakness

    CWE-573: Improper Following of Specification by Caller

    CWE-669: Incorrect Resource Transfer Between Spheres