CWE-552

Files or Directories Accessible to External Parties

Medium

Description

The product makes files or directories accessible to unauthorized actors, even though they should not be.

Potential Impact

How to Fix

Implementation

When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to disable public access.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-552 vulnerabilities in your codebase.

Get Security Assessment