CWE-552Files or Directories Accessible to External Parties

Description

The product makes files or directories accessible to unauthorized actors, even though they should not be.

[object Object]

Common consequences

• Confidentiality,Integrity→Read Files or Directories,Modify Files or Directories

Potential mitigations

• Implementation,System Configuration,Operation
  When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to disable public access.

Related CWEs

Recent CVEs classified under this CWE