CWE-453—Insecure Default Variable Initialization

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-453
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Insecure Default Variable Initialization

描述

The product, by default, initializes an internal variable with an insecure or less secure value than is possible.

常见后果

范围：
Integrity
影响：
Modify Application Data
注释：
An attacker could gain access to and modify sensitive data or system information.

相关 CWE

browse all CWEs