CWE Database
/

CWE-496

Back to CWE list

CWE-496

Public Data Assigned to Private Array-Typed Field

Variant
Incomplete

Description

Assigning public data to a private array is equivalent to giving public access to the array.

Common Consequences

Scope

Integrity

Impact

Modify Application Data

Potential Mitigations

Implementation

Do not allow objects to modify private members of a class.

Applicable Platforms

Object-Oriented
C
C++
Java
C#

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now