CWE-668Exposure of Resource to Wrong Sphere

Description

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

[object Object]

Common consequences

• Confidentiality→Read Application Data
  An adversary that gains access to a resource exposed to a wrong sphere could potentially retrieve private data from that resource, thus breaking the intended confidentiality of that data.
• Integrity→Modify Application Data
  An adversary that gains access to a resource exposed to a wrong sphere could potentially modify data held within that resource, thus breaking the intended integrity of that data and causing the system relying on that resource to make uninte
• Other→Varies by Context
  The consequences may vary widely depending on how the product uses the affected resource.

Related CWEs

Recent CVEs classified under this CWE