SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CWE

Files or Directories Accessible to External Parties

Description

Files or directories are accessible in the environment that should not be.

Applicable Platforms
None

Time Of Introduction

Common Consequences

Scope	Technical Impact	Notes
Confidentiality Integrity	Read files or directories Modify files or directories

Detection Methods
None

Potential Mitigations
None

Relationships

Related CWE	Type	View	Chain
CWE-552 ChildOf CWE-895	Category	CWE-888

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings

Taxynomy	Id	Name	Fit
OWASP Top Ten 2004	A10	Insecure Configuration Management	CWE_More_Specific
CERT C Secure Coding	FIO15-C	Ensure that file operations are performed in a secure directory
CERT C++ Secure Coding	FIO15-CPP	Ensure that file operations are performed in a secure directory

References:
None