CWE CWE-529 – Exposure of Access Control List Files to an Unauthorized Control Sphere May 26, 2022 rocco