CWE-40—Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

PUBLISHEDweakness record

released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:: CWE-40
Abstraction:: Variant
Structure:: Simple
Status:: Draft
Release Date:: 2006-07-19
Latest Modification Date:: 2025-12-11

Weakness Name

Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

Description

The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.

Common Consequences

Scope:: Confidentiality, Integrity
Impact:: Read Files or Directories, Modify Files or Directories

Related Weaknesses

browse all CWEs