CWE-437 詳細資料

A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.

引入方式

Architecture and Design
Implementation

適用平台

程式語言

類別： Not Language-Specific (Undetermined)

常見後果

觀察到的案例

漏洞對應備注

理由說明 : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
備註 : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

備注

This can be related to interaction errors, although in some cases, one of the endpoints is not performing correctly according to specification.

提交

修改記錄