logo

CWE-496 - Public Data Assigned to Private Array-Typed Field

  • Abstraction:Variant
  • Structure:Simple
  • Status:Incomplete
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Public Data Assigned to Private Array-Typed Field

Description

Assigning public data to a private array is equivalent to giving public access to the array.

Common Consequences

Scope: Integrity

Impact: Modify Application Data

Notes: The contents of the array can be modified from outside the intended scope.

Related Weaknesses