CWE-489

Active Debug Code
AI Translation Available

The product is released with debugging code still enabled or active.

Status
draft
Abstraction
base
Not Technology-Specific ICS/OT

Common Consequences

confidentiality integrity availability access control other
Impacts
bypass protection mechanism read application data gain privileges or assume identity varies by context

Detection Methods

automated static analysis

Potential Mitigations

Phases:
build and compilation distribution
Descriptions:
• Remove debug code before deploying the application.