CWE-496: Public Data Assigned to Private Array-Typed Field
Description
Assigning public data to a private array is equivalent to giving public access to the array.
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Integrity
Modify Application Data
The contents of the array can be modified from outside the intended scope.
Potential mitigations
- Implementation
Do not allow objects to modify private members of a class.
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.