|
|
|
|
CWE-348 Individual Dictionary Definition (Draft 9)
Weakness ID
| Status: Draft 348 (Weakness Base) | | Description | Summary The software has two different sources of the same data or information, but it uses the
source that has less support for verification, is less trusted, or is less resistant to attack. | | Observed Examples | | Reference | Description |
|---|
| CVE-2001-0860 | Product uses IP address provided by a client, instead of obtaining it from the packet
headers, allowing easier spoofing. | | CVE-2004-1950 | Web product uses the IP address in the X-Forwarded-For HTTP header instead of a
server variable that uses the connecting IP address, allowing filter bypass. | | BID:15326 | Similar to CVE-2004-1950 | | CVE-2001-0908 | Product logs IP address specified by the client instead of obtaining it from the
packet headers, allowing information hiding. | | CVE-2006-1126 | PHP application uses IP address from X-Forwarded-For HTTP header, instead of
REMOTE_ADDR. |
| | Relationships | | | Source Taxonomies | PLOVER - Use of Less Trusted Source | | Applicable Platforms | All | | Related Attack Patterns | | CAPEC-ID | Attack Pattern Name |
|---|
| 63 | Simple Script Injection | | 18 | Embedding Scripts in Nonscript Elements | | 73 | User-Controlled Filename | | 85 | Client Network Footprinting (using AJAX/XSS) | | 76 | Manipulating Input to File System Calls | | 86 | Embedding Script (XSS ) in HTTP Headers |
|
|
- Weakness
- Base
- Variant
- Class
- Chain
- Composite
- Category
- View
- Deprecated
