CWE-495 - Private Data Structure Returned From A Public Method
- Abstraction:Variant
- Structure:Simple
- Status:Draft
- Release Date:2006-07-19
- Latest Modification Date:2023-06-29
Weakness Name
Private Data Structure Returned From A Public Method
Description
The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.
Common Consequences
Scope: Integrity
Impact: Modify Application Data
Notes: The contents of the data structure can be modified from outside the intended scope.
