CWE-351: Insufficient Type Distinction
Insufficient Type Distinction
Weakness ID: 351 (Weakness Base) Status: Draft
Description
Description Summary
The software does not properly distinguish between different
types of elements in a way that leads to insecure
behavior.
Time of Introduction
Observed Examples
Reference Description CVE-2005-2260 Browser user interface does not distinguish
between user-initiated and synthetic events. CVE-2005-2801 Product does not compare all required data in two
separate elements, causing it to think they are the same, leading to loss of
ACLs. Similar to Same Name error.
Relationships
Relationship Notes
Overlaps others, e.g. Multiple Interpretation Errors.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name PLOVER Insufficient Type Distinction
Content History
Submissions Submission Date Submitter Organization Source PLOVER Externally Mined Modifications Modification Date Modifier Organization Source 2008-07-01 Eric Dalci Cigital External updated Time of Introduction 2008-09-08 CWE Content Team MITRE Internal updated Relationships, Relationship Notes,
Taxonomy Mappings
Description
