CWE-706—Use of Incorrectly-Resolved Name or Reference

PUBLISHEDweakness record
released 2008-09-09 · last modified 2025-12-11

Metadata

CWE ID：
CWE-706
摘要：
Class
结构：
Simple
状态：
Incomplete
发布日期：
2008-09-09
更新日期：
2025-12-11

名称

Use of Incorrectly-Resolved Name or Reference

描述

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

常见后果

范围：
Confidentiality, Integrity
影响：
Read Application Data, Modify Application Data

相关 CWE

browse all CWEs