CWE•Class•Draft•1 recent CVE
CWE-402Transmission of Private Resources into a New Sphere ('Resource Leak')
Description
The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.
Common consequences
- Confidentiality→Read Application Data