Weakness (CWE)
CWE-767: Access to Critical Private Variable via Public Method
Variant Incomplete
The product defines a public method that reads or modifies a private variable.
How to prevent it (1 mitigation)
-
Implementation
Use class accessor and mutator methods appropriately. Perform validation when accepting data from a public method that is intended to modify a critical private variable. Also be sure that appropriate access controls are being applied when a public method interfaces with critical data.
Source: MITRE CWE-767
1 result · Clear filters · Feed
-
High 7.5
ARC Informatique PcVue Access to Critical Private Variable via Public Method
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems …