CWE-766: Critical Data Element Declared Public

BaseIncomplete

The product declares a critical variable, field, or member to be public when intended security policy requires it to be private.

View on MITRE

Back to CWE Lookup

Extended Description

This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

Technical Details

Structure: Simple

Applicable To

Languages

C++C#Java

Platforms

Learn More

Find Related CVEs

Search for vulnerabilities that exploit CWE-766

CVE vs CWE: What's the Difference?

Understanding vulnerabilities vs weaknesses

Understanding CVSS Scoring

How vulnerability severity is measured

View Full MITRE Entry

Complete technical details and references