CWE-496 — Public Data Assigned to Private Array-Typed Field
CWE-496: Public Data Assigned to Private Array-Typed Field
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
Assigning public data to a private array is equivalent to giving public access to the array.
Common consequences
- Integrity: Modify Application Data
Mitigations
Implementation — Do not allow objects to modify private members of a class.
References
- CWE page: https://cwe.mitre.org/data/definitions/496.html
- CWE list: https://cwe.mitre.org/data/index.html