CWE-495: Private Data Structure Returned From A Public Method

ID CWE-495
Abstraction Variant
Structure Simple
Status Draft
The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.

Modes of Introduction

Phase Note
Implementation

Applicable Platforms

Type Class Name Prevalence
Language C
Language C++
Language Java
Language C#

Relationships

View Weakness
# ID View Status # ID Name Abstraction Structure Status
CWE-1000 Research Concepts Draft CWE-664 Improper Control of a Resource Through its Lifetime Pillar Simple Draft
Loading...
Loading...