The software assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.