Tag Archives: Public Data Assigned to Private Array-Typed Field

CWE-496 – Public Data Assigned to Private Array-Typed Field

Read Time:19 Second

Description

Assigning public data to a private array is equivalent to giving public access to the array.

Modes of Introduction:

– Implementation

 

 

Related Weaknesses

CWE-664

 

Consequences

Integrity: Modify Application Data

The contents of the array can be modified from outside the intended scope.

 

Potential Mitigations

Phase: Implementation

Description: 

Do not allow objects to modify private members of a class.

CVE References