CWE-669 - Incorrect Resource Transfer Between Spheres
- 摘要:Class
- 结构:Simple
- 状态:Draft
- 发布日期:2008-04-11
- 更新日期:2025-12-11
名称
Incorrect Resource Transfer Between Spheres
描述
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
常见后果
范围:Confidentiality, Integrity
影响:Read Application Data, Modify Application Data, Unexpected State