CWE-496β€”Public Data Assigned to Private Array-Typed Field

PUBLISHEDweakness record
released 2006-07-19 Β· last modified 2025-12-11

Metadata

CWE ID:
CWE-496
Abstraction:
Variant
Structure:
Simple
Status:
Incomplete
Release Date:
2006-07-19
Latest Modification Date:
2025-12-11

Weakness Name

Public Data Assigned to Private Array-Typed Field

Description

Assigning public data to a private array is equivalent to giving public access to the array.

Common Consequences

Scope:
Integrity
Impact:
Modify Application Data
Notes:
The contents of the array can be modified from outside the intended scope.

Related Weaknesses