1266
application might package multiple files or directories into an archive file (e.g., ZIP or tar), but the
application might not exclude sensitive files that are underneath those directories.
In cloud technologies and containers, this weakness might present itself in the form of
misconfigured storage accounts that can be read or written by a public or anonymous user.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 285 Improper Authorization 684
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
ParentOf 219 Storage of File with Sensitive Data Under Web Root 553
ParentOf 220 Storage of File With Sensitive Data Under FTP Root 555
ParentOf 527 Exposure of Version-Control Repository to an Unauthorized
Control Sphere