CWE•Base•Draft•7 recent CVEs
CWE-459Incomplete Cleanup
Description
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Common consequences
- Other,Confidentiality,Integrity→Other,Read Application Data,Modify Application Data,DoS: Resource Consumption (Other)It is possible to overflow the number of temporary files because directories typically have limits on the number of files allowed. This could create a denial of service problem.
Potential mitigations
- Architecture and Design,ImplementationTemporary files and other supporting resources should be deleted/released immediately after they are no longer needed.