CWE-403

Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.

No mitigation information available for this CWE.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page