CWE-706—Use of Incorrectly-Resolved Name or Reference

Weakness Name

Use of Incorrectly-Resolved Name or Reference

Description

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Common Consequences

Scope:

Confidentiality, Integrity

Impact:

Read Application Data, Modify Application Data

Related Weaknesses

• CWE-99Improper Control of Resource Identifiers ('Resource Injection')High
• CWE-664Improper Control of a Resource Through its Lifetime