CWE-669 在范围间的资源转移不正确

Incorrect Resource Transfer Between Spheres

结构: Simple

Abstraction: Class

状态: Draft

被利用可能性: unkown

基本描述

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

相关缺陷

  • cwe_Nature: ChildOf cwe_CWE_ID: 664 cwe_View_ID: 1000 cwe_Ordinal: Primary

常见的影响

范围 影响 注释
['Confidentiality', 'Integrity'] ['Read Application Data', 'Modify Application Data', 'Unexpected State']