CWE-510 — Trapdoor

provenance: imported · CWE: CWE-510

CWE-510: Trapdoor

MITRE CWE weakness


Kind	Weakness
Abstraction	Base
Status	Incomplete
Likelihood of exploit	—

Description

A trapdoor is a hidden piece of code that responds to a special input, allowing its user access to resources without passing through the normal security enforcement mechanism.

Common consequences

Confidentiality, Integrity, Availability, Access Control: Execute Unauthorized Code or Commands, Bypass Protection Mechanism

Mitigations

Installation — Always verify the integrity of the software that is being installed.

Testing — Identify and closely inspect the conditions for entering privileged areas of the code, especially those related to authentication, process invocation, and network communications.

References

CWE page: https://cwe.mitre.org/data/definitions/510.html
CWE list: https://cwe.mitre.org/data/index.html