CWE-668: Exposure of Resource to Wrong Sphere | Glexia

Executive Impact

• Confidentiality: Read Application Data: An adversary that gains access to a resource exposed to a wrong sphere could potentially retrieve private data from that resource, thus breaking the intended confidentiality of that data.
• Integrity: Modify Application Data: An adversary that gains access to a resource exposed to a wrong sphere could potentially modify data held within that resource, thus breaking the intended integrity of that data and causing the system relying on that resource to make unintended decisions.
• Other: Varies by Context: The consequences may vary widely depending on how the product uses the affected resource.

Developer Pattern

CWE-668 is the kind of defect developers can usually prevent with explicit validation, safer framework defaults, and tests that exercise hostile input or unsafe state transitions.

Automation confidence

high confidence from CWE-668, 4.20.