CWE Database
/

CWE-706

Back to CWE list

CWE-706

Use of Incorrectly-Resolved Name or Reference

Class
Incomplete

Description

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Related Weaknesses

Common Consequences

Scope

Confidentiality
Integrity

Impact

Read Application Data, Modify Application Data

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now