CWE-706 - Use of Incorrectly-Resolved Name or Reference
CWE-706
- Abstraction:
- Class
- Structure:
- Simple
- Status:
- Incomplete
- Weakness Name
Use of Incorrectly-Resolved Name or Reference
- Description
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
- Common Consequences
Scope: Confidentiality, Integrity
Impact: Read Application Data, Modify Application Data
- Related Weaknesses
- Release Date:
- 2008-09-09
- Latest Modification Date:
- 2023-06-29
Free security scan for your website