Common Weakness Enumeration

    CWE Definition / CWE-766

    CWE-766: Critical Data Element Declared Public

    The product declares a critical variable, field, or member to be public when intended security policy requires it to be private.

    Published:3 Mar 2009
    Organization:MITRE
    Modified:29 Feb 2024

    Related Weakness

    CWE-732: Incorrect Permission Assignment for Critical Resource

    CWE-1061: Insufficient Encapsulation

    CWE-766: Critical Data Element Declared Public | CVE-DB