CWE-528: Exposure of Core Dump File to an Unauthorized Control Sphere

Description

The product generates a core dump file in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.

Potential Impact

Confidentiality: Read Application Data

How to Fix

System Configuration

Protect the core dump files from unauthorized access.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-528 vulnerabilities in your codebase.

Get Security Assessment