Insufficient UI Warning of Dangerous Operations

Opis

The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.

Skutki

• Non-Repudiation

  Hide Activities

Przykłady podatności

• CVE-2007-1099 User not sufficiently warned if host key mismatch occurs

Słabość nadrzędna

• CWE-693 Protection Mechanism Failure

Słabości podrzędne

• CWE-450 Multiple Interpretations of UI Input

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific