CWE-1244
Internal Asset Exposed to Unsafe Debug Access Level or State
The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.
Impactr finds and proves whether CWE-1244 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.