CWE-402: Transmission of Private Resources into a New Sphere ('Resource Leak')
Also known as: Resource Leak
The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.
Overview
CWE-402 (Transmission of Private Resources into a New Sphere ('Resource Leak')) is a class-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.