243
ParentOf 621 Variable Extraction Error 1385
ParentOf 627 Dynamic Variable Evaluation 1396
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 399 Resource Management Errors 2324
Weakness Ordinalities
Primary :
Common Consequences
Scope Impact Likelihood
Integrity Modify Application Data
An attacker could modify sensitive data or program
variables.
Integrity Execute Unauthorized Code or Commands
Other
Integrity
Varies by Context
Alter Execution Logic
Potential Mitigations
Phase: Implementation
Strategy = Input Validation
For any externally-influenced input, check the input against an allowlist of internal program
variables that are allowed to be modified.
Phase: Implementation
Phase: Architecture and Design
Strategy = Refactoring
CWE Version 4.14
CWE-914: Improper Control of Dynamically-Identified Variables
CWE-914: Improper Control of Dynamically-Identified Variables