CWE-403: CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

BaseStable

Description

View on MITRE

Back to CWE Lookup

Extended Description

Technical Details

Structure: Simple
Vulnerability Mapping: ALLOWED

Applicable To

Languages

Platforms

Languages

Frequently Asked Questions

What is CWE-403: CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')?+

CWE-403: CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak') is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description

What are the security consequences of CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')?+

If exploited, CWE-403 (CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')) it can compromise Read Application Data and Modify Application Data, leading to outcomes such as Scope: Confidentiality and Integrity.

Which programming languages are affected by CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')?+

CWE-403 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-403 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.