logo

CWE-669 - Incorrect Resource Transfer Between Spheres

  • Abstraction:Class
  • Structure:Simple
  • Status:Draft
  • Release Date:2008-04-11
  • Latest Modification Date:2024-02-29

Weakness Name

Incorrect Resource Transfer Between Spheres

Description

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Common Consequences

Scope: Confidentiality, Integrity

Impact: Read Application Data, Modify Application Data, Unexpected State

Related Weaknesses