CWE-15—External Control of System or Configuration Setting

名称

External Control of System or Configuration Setting

描述

One or more system settings or configuration elements can be externally controlled by a user.

Allowing external control of system settings can disrupt service or cause an application to behave in unexpected, and potentially malicious ways.

常见后果

范围：

Other

影响：

Varies by Context

相关 CWE

• CWE-20Improper Input ValidationHigh
• CWE-610Externally Controlled Reference to a Resource in Another Sphere
• CWE-642External Control of Critical State DataHigh