Use of Incorrectly-Resolved Name or Reference

Incomplete Class
Structure: Simple
Description

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Common Consequences 1
Scope: ConfidentialityIntegrity

Impact: Read Application DataModify Application Data