1414
Mapped Taxonomy Name Node ID Fit Mapped Node Name
Software Fault Patterns SFP24 Tainted input to command
CWE-642: External Control of Critical State Data
Weakness ID : 642
Structure : Simple
Abstraction : Class
Description
The product stores security-critical state information about its users, or the product itself, in a
location that is accessible to unauthorized actors.
Extended Description
If an attacker can modify the state information without detection, then it could be used to perform
unauthorized actions or access unexpected resources, since the application programmer does not
expect that the state can be changed.
State information can be stored in various locations such as a cookie, in a hidden web form field,
input parameter or argument, an environment variable, a database record, within a settings file, etc.
All of these locations have the potential to be modified by an attacker. When this state information
is used to control security or determine resource usage, then it may create a vulnerability. For
example, an application may perform authentication, then save the state in an "authenticated=true"
cookie. An attacker may simply create this cookie in order to bypass the authentication.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
ParentOf 15 External Control of System or Configuration Setting 17
ParentOf 73 External Control of File Name or Path 132
ParentOf 426 Untrusted Search Path 1028
ParentOf 472 External Control of Assumed-Immutable Web Parameter 1123
ParentOf 565 Reliance on Cookies without Validation and Integrity
Checking