logo

CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak')

  • Abstraction:Class
  • Structure:Simple
  • Status:Draft
  • Release Date:2006-07-19
  • Latest Modification Date:2023-10-26

Weakness Name

Transmission of Private Resources into a New Sphere ('Resource Leak')

Description

The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.

Common Consequences

Scope: Confidentiality

Impact: Read Application Data

Related Weaknesses