CWE
Home > CWE List > CWE- Individual Dictionary Definition (1.6)  

CWE-510: Trapdoor

 
Trapdoor
Weakness ID: 510 (Weakness Base)Status: Incomplete
+ Description

Description Summary

A trapdoor is a hidden piece of code that responds to a special input, allowing its user access to resources without passing through the normal security enforcement mechanism.
+ Time of Introduction
  • Architecture and Design
  • Implementation
  • Operation
+ Potential Mitigations
PhaseDescription

Always verify the integrity of the software that is being installed.

Identify and closely inspect the conditions for entering privileged areas of the code, especially those related to authentication, process invocation, and network communications.

+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfWeakness ClassWeakness Class506Embedded Malicious Code
Development Concepts (primary)699
Research Concepts (primary)1000
+ Taxonomy Mappings
Mapped Taxonomy NameNode IDFitMapped Node Name
LandwehrTrapdoor
+ Content History
Submissions
Submission DateSubmitterOrganizationSource
LandwehrExternally Mined
Modifications
Modification DateModifierOrganizationSource
2008-07-01Eric DalciCigitalExternal
updated Potential Mitigations, Time of Introduction
2008-09-08CWE Content TeamMITREInternal
updated Relationships, Taxonomy Mappings
Page Last Updated: October 29, 2009