CWEweakness
CWE-512 Spyware
- Alternate terms
- Spyware
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product collects personally identifiable information about a human user or the user's activities, but the product accesses this information using other resources besides itself, and it does not require that user's explicit approval or direct input into the product.
Common consequences
• Confidentiality: Read Application Data
Potential mitigations
• [Operation] Use spyware detection and removal software.
• [Installation] Always verify the integrity of the product that is being installed.
Related
Child of · CWE (1)
- CWE-506 Embedded Malicious Code weakness