CWE-921

Storage of Sensitive Data in a Mechanism without Access Control

Confidentiality: Read Application Data
Integrity: Modify Application Data

Medium

Description

The product stores sensitive information in a file system or device that does not have built-in access control.

Our security experts can help you identify and remediate CWE-921 vulnerabilities in your codebase.