CWE-668Exposure of Resource to Wrong Sphere

Description

Common consequences· 3

• Confidentiality — Read Application Data
  An adversary that gains access to a resource exposed to a wrong sphere could potentially retrieve private data from that resource, thus breaking the intended confidentiality of that data.
• Integrity — Modify Application Data
  An adversary that gains access to a resource exposed to a wrong sphere could potentially modify data held within that resource, thus breaking the intended integrity of that data and causing the system relying on that resource to make unintended decisions.
• Other — Varies by Context
  The consequences may vary widely depending on how the product uses the affected resource.

Compliance frameworks addressing this (incoming)23

(incoming)19

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.