CWE-386 — Symbolic Name not Mapping to Correct Object
CWE-386: Symbolic Name not Mapping to Correct Object
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
A constant symbolic reference to an object is used, even though the reference can resolve to a different object over time.
Common consequences
- Access Control: Gain Privileges or Assume Identity
- Integrity, Confidentiality, Other: Modify Application Data, Modify Files or Directories, Read Application Data, Read Files or Directories, Other
- Integrity, Other: Modify Application Data, Other
- Non-Repudiation: Hide Activities
- Non-Repudiation, Integrity: Modify Files or Directories
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/386.html
- CWE list: https://cwe.mitre.org/data/index.html