Unimplemented or Unsupported Feature in UI

Opis

A UI function for a security feature appears to be supported and gives feedback to the user that suggests that it is supported, but the underlying functionality is not implemented.

Skutki

• Other

  Varies by Context; Unexpected State

Zapobieganie

• Testing

  Perform functionality testing before deploying the application.

Przykłady podatności

• CVE-2000-0127 GUI configuration tool does not enable a security option when a checkbox is selected, although that option is honored when manually set in the configuration file.
• CVE-2001-0863 Router does not implement a specific keyword when it is used in an ACL, allowing filter bypass.
• CVE-2001-0865 Router does not implement a specific keyword when it is used in an ACL, allowing filter bypass.
• CVE-2004-0979 Web browser does not properly modify security setting when the user sets it.

Słabość nadrzędna

• CWE-446 UI Discrepancy for Security Feature
• CWE-671 Lack of Administrator Control over Security

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific, Not Technology-Specific

Uwagi

This issue needs more study, as there are not many examples. It is not clear whether it is primary or resultant.