Insufficient Type Distinction

Opis

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Skutki

• Other

  Other

Przykłady podatności

• CVE-2005-2260 Browser user interface does not distinguish between user-initiated and synthetic events.
• CVE-2005-2801 Product does not compare all required data in two separate elements, causing it to think they are the same, leading to loss of ACLs. Similar to Same Name error.

Słabość nadrzędna

• CWE-345 Insufficient Verification of Data Authenticity

Pokrewna

• CWE-436 Interpretation Conflict

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Uwagi

Overlaps others, e.g. Multiple Interpretation Errors.