CWE-706 — Use of Incorrectly-Resolved Name or Reference
CWE-706: Use of Incorrectly-Resolved Name or Reference
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Class |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
Common consequences
- Confidentiality, Integrity: Read Application Data, Modify Application Data
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/706.html
- CWE list: https://cwe.mitre.org/data/index.html