What CVEs are caused by CWE-529?

1 recorded CVEs are attributed to CWE-529, including CVE-2014-0752.

What are the consequences of CWE-529?

Exploiting CWE-529 can lead to: Read Application Data, Bypass Protection Mechanism.

Is CWE-529 actively exploited?

1 recorded CVEs are caused by CWE-529; none are currently in CISA's KEV catalog of actively exploited flaws.

Variant weakness

Incomplete

CWE-529: Exposure of Access Control List Files to an Unauthorized Control Sphere

The product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.

Last updated May 1, 2026

Recorded CVEs

With this primary weakness

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Variant

Abstraction

MITRE classification

Overview

Exposure of these access control list files may give the attacker information about the configuration of the site or system. This information may then be used to bypass the intended security policy or identify trusted systems from which an attack can be launched.

Real-world CVEs

1 recorded CVEs are caused by CWE-529 (Exposure of Access Control List Files to an Unauthorized Control Sphere). The highest-severity and most recent are shown first.

CVE-2014-0752
Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
High · CVSS 7.5 · EPSS 73th
2014-01-09

Common consequences

What can happen when CWE-529 is exploited.

Read Application Data, Bypass Protection Mechanism

Affects: Confidentiality, Access Control

How it happens

When it is introduced

Typically introduced during these phases of the software lifecycle.

Operation

How to prevent it

Practical mitigations for CWE-529, grouped by where in the lifecycle they apply.

System Configuration

Protect access control list files.

Frequently asked questions

Common questions about CWE-529.

What is CWE-529?: The product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.
What CVEs are caused by CWE-529?: 1 recorded CVEs are attributed to CWE-529, including CVE-2014-0752.
How do you prevent CWE-529?: Protect access control list files.
What are the consequences of CWE-529?: Exploiting CWE-529 can lead to: Read Application Data, Bypass Protection Mechanism.
Is CWE-529 actively exploited?: 1 recorded CVEs are caused by CWE-529; none are currently in CISA's KEV catalog of actively exploited flaws.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-529

Get alerted the moment a new CWE-529 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing