CWE-512

Spyware

Medium

Description

The product collects personally identifiable information about a human user or the user's activities, but the product accesses this information using other resources besides itself, and it does not require that user's explicit approval or direct input into the product.

Potential Impact

How to Fix

Operation

Use spyware detection and removal software.

Installation

Always verify the integrity of the product that is being installed.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-512 vulnerabilities in your codebase.

Get Security Assessment