CWE-767: Access to Critical Private Variable via Public Method
The product defines a public method that reads or modifies a private variable.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sharp corporation multiple mfps (multifunction printers) The web interface of the affected devices is designed to hide the LDAP credentials even for... 5.3 Medium
- zabbix The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and... 6.5 Medium
- arc informatique pcvue ARC Informatique PcVue Access to Critical Private Variable via Public Method 7.5 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 more The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without... 7.3 High