CWE-402

Transmission of Private Resources into a New Sphere ('Resource Leak')

Class

Draft

The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.

Parent Weaknesses (ChildOf)

Scope

Confidentiality

Impact

Read Application Data

Server leaks a privileged file descriptor, allowing the server to be hijacked.

File descriptor leak allows read of restricted files.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.