CWE-767

Access to Critical Private Variable via Public Method

Medium

Description

The product defines a public method that reads or modifies a private variable.

Potential Impact

How to Fix

Implementation

Use class accessor and mutator methods appropriately. Perform validation when accepting data from a public method that is intended to modify a critical private variable. Also be sure that appropriate access controls are being applied when a public method interfaces with critical data.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-767 vulnerabilities in your codebase.

Get Security Assessment