CWE-485: Seven Pernicious Kingdoms Data Protection Vulnerabilities
Learn about the Seven Pernicious Kingdoms vulnerability group that highlights data protection weaknesses when essential data or functionality aren't adequately secured.
Summary
This particular group falls under the classification of vulnerabilities known as the Seven Pernicious Kingdoms. It encompasses weaknesses that arise when a product fails to adequately protect essential data or functionality. As stated by the creators of the Seven Pernicious Kingdoms, "Encapsulation involves establishing clear boundaries. For instance, in a web browser, it involves preventing mobile code from being misused by other mobile code. On a server, it could entail distinguishing between validated and unvalidated data, differentiating between data belonging to different users, or separating data that users are allowed to access from restricted data."