CWE-767 Access to Critical Private Variable via Public Method
baseThe product defines a public method that reads or modifies a private variable.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8380US | high7.3 | Exploit | ||
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. | ||||
| CVE-2024-36463US | high8.8 | — | ||
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects. | ||||
| CVE-2020-26868US | high7.5 | — | ||
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messag… | ||||
| CVE-2024-34162US | — | — | ||
The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device commun… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan