CWE-528 将CoreDump文件暴露给非授权控制范围

Exposure of Core Dump File to an Unauthorized Control Sphere

结构: Simple

Abstraction: Variant

状态: Draft

被利用可能性: unkown

基本描述

The product generates a core dump file in a directory that is accessible to actors outside of the intended control sphere.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 538 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 538 cwe_View_ID: 699 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 552 cwe_View_ID: 1000

• cwe_Nature: ChildOf cwe_CWE_ID: 552 cwe_View_ID: 699

常见的影响

范围	影响	注释
Confidentiality	['Read Application Data', 'Read Files or Directories']

可能的缓解方案

System Configuration

策略:

Protect the core dump files from unauthorized access.

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
CERT C Secure Coding	MEM06-C		Ensure that sensitive data is not written out to disk

文章来源于互联网:scap中文网