cve.bz

CWE-767: Access to Critical Private Variable via Public Method

Filter

The product defines a public method that reads or modifies a private variable.

What the weakness is: CWE-767 at MITRE. All weaknesses

Ask an AI about CWE-767

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-767: Access to Critical Private Variable via Public Method and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/767.html and https://cve.bz/cve/cwe/767?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2024-36463EPSS 0.8%

    The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.

  2. 5.3CVE-2024-34162EPSS 0.8%

    The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP passwor…

  3. 7.5CVE-2020-26868EPSS 2.2%

    ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects …

  4. 7.3CVE-2016-8380ExploitEPSS 11%

    The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.