CWE-669: Incorrect Resource Transfer Between Spheres
Description
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- ConfidentialityIntegrity
Read Application Data; Modify Application Data; Unexpected State
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-212Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-243Creation of chroot Jail Without Changing Working Directory
- CWE-434Unrestricted Upload of File with Dangerous Type
- CWE-494Download of Code Without Integrity Check
- CWE-829Inclusion of Functionality from Untrusted Control Sphere
- CWE-1420Exposure of Sensitive Information during Transient Execution
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.