CWE-610Externally Controlled Reference to a Resource in Another Sphere

Description

Common consequences· 2

• Confidentiality / Integrity — Read Application Data, Modify Application Data
  An adversary could read or modify data, depending on how the resource is intended to be used.
• Access Control — Gain Privileges or Assume Identity
  An adversary that can supply a reference to an unintended resource can potentially access a resource that they do not have privileges for, thus bypassing existing access control mechanisms.

Related CAPEC attack patterns· 1

Exploits (incoming)1

Compliance frameworks addressing this (incoming)1

(incoming)24

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.