CWE - CWE-632: Weaknesses that Affect Files or Directories (Draft 9)

Home > CWE List > CWE-632 Individual Dictionary Definition (Draft 9)

CWE-632 Individual Dictionary Definition (Draft 9)

Category ID

Status: Draft

632 (Category)

Description

Summary

Weaknesses in this category affect file or directory resources.

Relationships

Nature	Type	ID	Name
ChildOf	View	631
ParentOf	Category	275	Permission Issues
ParentOf	Category	376	Temporary File Issues
ParentOf	Category	70	Mac Virtual File Problems
ParentOf	Weakness Base	178	Failure to Resolve Case Sensitivity
ParentOf	Weakness Class	22	Path Traversal
ParentOf	Weakness Variant	243	Failure to Change Working Directory in chroot Jail
ParentOf	Weakness Variant	249	Often Misused: Path Manipulation
ParentOf	Weakness Variant	260	Password in Configuration File
ParentOf	Weakness Class	282	Improper Ownership Management
ParentOf	Weakness Class	284	Access Control Issues
ParentOf	Weakness Class	41	Failure to Resolve Path Equivalence
ParentOf	Weakness Variant	533	Information Leak Through Server Log Files
ParentOf	Weakness Base	552	Files or Directories Accessible to External Parties
ParentOf	Weakness Base	59	Failure to Resolve Links Before File Access (aka 'Link Following')
ParentOf	Weakness Variant	67	Failure to Handle Windows Device Names
ParentOf	Weakness Base	96	Insufficient Control of Directives in Statically Saved Code (Static Code Injection)
ParentOf	Compound Element: Composite	434	Unrestricted File Upload
ParentOf	Compound Element: Composite	98	Insufficient Control of Filename for Include/Require Statement in PHP Program (aka 'PHP File Inclusion')

Page Last Updated: April 22, 2008


	CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us