CWE-402—Transmission of Private Resources into a New Sphere ('Resource Leak')

PUBLISHEDweakness record

released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:: CWE-402
Abstraction:: Class
Structure:: Simple
Status:: Draft
Release Date:: 2006-07-19
Latest Modification Date:: 2025-12-11

Weakness Name

Transmission of Private Resources into a New Sphere ('Resource Leak')

Description

The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.

Common Consequences

Scope:: Confidentiality
Impact:: Read Application Data

Related Weaknesses

browse all CWEs