CWE-648 - Incorrect Use of Privileged APIs
The application does not conform to the API requirements for a function call that requires extra privileges. This could allow attackers to gain privileges by causing the function to be called incorrectly.
Latest vulnerabilities for CWE-648
Information disclosure in ownCloud Server
Description of CWE-648 on Mitre website