The UI Performs the Wrong Action

Opis

The UI performs the wrong action with respect to the user's request.

Skutki

• Other

  Quality Degradation; Varies by Context

Przykłady podatności

• CVE-2001-1387 Network firewall accidentally implements one command line option as if it were another, possibly leading to behavioral infoleak.
• CVE-2001-0081 Command line option correctly suppresses a user prompt but does not properly disable a feature, although when the product prompts the user, the feature is properly disabled.
• CVE-2002-1977 Product does not "time out" according to user specification, leaving sensitive data available after it has expired.

Słabość nadrzędna

• CWE-446 UI Discrepancy for Security Feature

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific