CWE-673 — External Influence of Sphere Definition
CWE-673: External Influence of Sphere Definition
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Class |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product does not prevent the definition of control spheres from external actors.
Typically, a product defines its control sphere within the code itself, or through configuration by the product's administrator. In some cases, an external party can change the definition of the control sphere. This is typically a resultant weakness.
Common consequences
- Other: Other
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/673.html
- CWE list: https://cwe.mitre.org/data/index.html