CWE-529: Exposure of Access Control List Files to an Unauthorized Control Sphere
The product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.
A kind of CWE-552 Files or Directories Accessible to External Parties.
From the CWE List. © The MITRE Corporation.