CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere
variantThe product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0752US | medium5.0 | — | ||
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan