1238
ParentOf 530 Exposure of Backup File to an Unauthorized Control Sphere 1239
ParentOf 539 Use of Persistent Cookies Containing Sensitive Information 1250
ParentOf 553 Command Shell in Externally Accessible Directory 1269
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1212 Authorization Errors 2476
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Technology : Cloud Computing (Prevalence = Often)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Read Files or Directories
Modify Files or Directories
Detection Methods
Automated Static Analysis
CWE Version 4.14
CWE-552: Files or Directories Accessible to External Parties
CWE-552: Files or Directories Accessible to External Parties