CWE - CWE-552: Files or Directories Accessible to External Parties (Draft 9)

Home > CWE List > CWE-552 Individual Dictionary Definition (Draft 9)

CWE-552 Individual Dictionary Definition (Draft 9)

Weakness ID

Status: Draft

552 (Weakness Base)

Description

Summary

Files or directories are accessible in the environment that should not be.

Affected Resource

File/Directory

Relationships

Nature	Type	ID	Name
ChildOf	Category	2	Environment
ChildOf	Category	632	Weaknesses that Affect Files or Directories
ChildOf	Weakness Class	668	Exposure of Resource to Wrong Sphere
ParentOf	Weakness Variant	527	Information Leak Through CVS Repository
ParentOf	Weakness Variant	528	Information Leak Through Core Dump Files
ParentOf	Weakness Variant	529	Information Leak Through Access Control List Files
ParentOf	Weakness Variant	530	Information Leak Through Backup (.~bk) Files
ParentOf	Weakness Variant	531	Information Leak Through Test Code
ParentOf	Weakness Variant	532	Information Leak Through Log Files
ParentOf	Weakness Variant	533	Information Leak Through Server Log Files
ParentOf	Weakness Variant	534	Information Leak Through Debug Log Files
ParentOf	Weakness Variant	540	Information Leak Through Source Code
ParentOf	Weakness Variant	541	Information Leak Through Include Source Code
ParentOf	Weakness Variant	542	Information Leak Through Cleanup Log Files
ParentOf	Weakness Variant	548	Information Leak Through Directory Listing
ParentOf	Weakness Variant	553	Command Shell in Externally Accessible Directory

Page Last Updated: April 22, 2008


	CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us