CWE-489

Active Debug Code
AI Translation Available

The product is released with debugging code still enabled or active.

Status
draft
Abstraction
base
ICS/OT Not Technology-Specific

Common Consequences

confidentiality integrity availability access control other
Impacts
bypass protection mechanism read application data gain privileges or assume identity varies by context

Detection Methods

automated static analysis

Potential Mitigations

Phases:
build and compilation distribution
Descriptions:
• Remove debug code before deploying the application.