CWE-471

Modification of Assumed-Immutable Data (MAID)

Medium

Description

The product does not properly protect an assumed-immutable element from being modified by an attacker.

Potential Impact

How to Fix

Architecture and Design

When the data is stored or transmitted through untrusted sources that could modify the data, implement integrity checks to detect unauthorized modification, or store/transmit the data in a trusted location that is free from external influence.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-471 vulnerabilities in your codebase.

Get Security Assessment