Weakness (CWE)
CWE-767: Access to Critical Private Variable via Public Method
Variant Incomplete
The product defines a public method that reads or modifies a private variable.
How to prevent it (1 mitigation)
-
Implementation
Use class accessor and mutator methods appropriately. Perform validation when accepting data from a public method that is intended to modify a critical private variable. Also be sure that appropriate access controls are being applied when a public method interfaces with critical data.
Source: MITRE CWE-767
4 results · Feed
-
Medium 6.5
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access interna…
-
Medium 5.3
The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But c…
-
High 7.5
ARC Informatique PcVue Access to Critical Private Variable via Public Method
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems …
-
Unscored —
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.