CWE-453Insecure Default Variable Initialization

Description

Common consequences· 1

• Integrity — Modify Application Data
  An attacker could gain access to and modify sensitive data or system information.

Potential mitigations· 1

• [System Configuration]Disable or change default settings when they can be used to abuse the system. Since those default settings are shipped with the product they are likely to be known by a potential attacker who is familiar with the product. For instance, default credentials should be changed or the associated accounts should be disabled.

(incoming)2

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.