CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

Description

A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.

Potential Impact

Confidentiality: Read Application Data

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-403 vulnerabilities in your codebase.

Get Security Assessment