CWE-1403 · Kategoria
Comprehensive Categorization: Exposed Resource
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to exposed resource.
Wpisy w tej grupie
- CWE-8 J2EE Misconfiguration: Entity Bean Declared Remote
- CWE-15 External Control of System or Configuration Setting
- CWE-73 External Control of File Name or Path
- CWE-114 Process Control
- CWE-219 Storage of File with Sensitive Data Under Web Root
- CWE-220 Storage of File With Sensitive Data Under FTP Root
- CWE-374 Passing Mutable Objects to an Untrusted Method
- CWE-375 Returning a Mutable Object to an Untrusted Caller
- CWE-377 Insecure Temporary File
- CWE-378 Creation of Temporary File With Insecure Permissions
- CWE-379 Creation of Temporary File in Directory with Insecure Permissions
- CWE-402 Transmission of Private Resources into a New Sphere ('Resource Leak')
- CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
- CWE-426 Untrusted Search Path
- CWE-427 Uncontrolled Search Path Element
- CWE-428 Unquoted Search Path or Element
- CWE-433 Unparsed Raw Web Content Delivery
- CWE-472 External Control of Assumed-Immutable Web Parameter
- CWE-488 Exposure of Data Element to Wrong Session
- CWE-491 Public cloneable() Method Without Final ('Object Hijack')
- CWE-492 Use of Inner Class Containing Sensitive Data
- CWE-493 Critical Public Variable Without Final Modifier
- CWE-498 Cloneable Class Containing Sensitive Information
- CWE-499 Serializable Class Containing Sensitive Data
- CWE-500 Public Static Field Not Marked Final
- CWE-524 Use of Cache Containing Sensitive Information
- CWE-525 Use of Web Browser Cache Containing Sensitive Information
- CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
- CWE-528 Exposure of Core Dump File to an Unauthorized Control Sphere
- CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere
- CWE-530 Exposure of Backup File to an Unauthorized Control Sphere
- CWE-539 Use of Persistent Cookies Containing Sensitive Information
- CWE-552 Files or Directories Accessible to External Parties
- CWE-553 Command Shell in Externally Accessible Directory
- CWE-565 Reliance on Cookies without Validation and Integrity Checking
- CWE-582 Array Declared Public, Final, and Static
- CWE-583 finalize() Method Declared Public
- CWE-608 Struts: Non-private Field in ActionForm Class
- CWE-619 Dangling Database Cursor ('Cursor Injection')
- CWE-642 External Control of Critical State Data
- CWE-668 Exposure of Resource to Wrong Sphere
- CWE-767 Access to Critical Private Variable via Public Method
- CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision
- CWE-1282 Assumed-Immutable Data is Stored in Writable Memory
- CWE-1327 Binding to an Unrestricted IP Address
Źródła
Wpis z katalogu CWE 4.20.