Common Weakness Enumeration

    CWE Definition / CWE-642

    CWE-642: External Control of Critical State Data

    The product stores security-critical state information about its users, or the product itself, in a location that is accessible to unauthorized actors.

    Published:30 Jan 2008
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-668: Exposure of Resource to Wrong Sphere