2149
CWE-1293: Missing Source Correlation of Multiple Independent Data
Weakness ID : 1293
Structure : Simple
Abstraction : Base
Description
The product relies on one source of data, preventing the ability to detect if an adversary has
compromised a data source.
Extended Description
To operate successfully, a product sometimes has to implicitly trust the integrity of an information
source. When information is implicitly signed, one can ensure that the data was not tampered in
transit. This does not ensure that the information source was not compromised when responding
to a request. By requesting information from multiple sources, one can check if all of the data is
the same. If they are not, the system should report the information sources that respond with a
different or minority value as potentially compromised. If there are not enough answers to provide
a majority or plurality of responses, the system should report all of the sources as potentially
compromised. As the seriousness of the impact of incorrect integrity increases, so should the
number of independent information sources that would need to be queried.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 345 Insufficient Verification of Data Authenticity 851
PeerOf 654 Reliance on a Single Factor in a Security Decision 1439
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Read Application Data
Modify Application Data
Gain Privileges or Assume Identity
An attacker that may be able to execute a single Personin-
the-Middle attack can subvert a check of an external
oracle (e.g. the ACME protocol check for a file on a
website), and thus inject an arbitrary reply to the single
perspective request to the external oracle.
Potential Mitigations
Phase: Requirements
Design system to use a Practical Byzantine fault method, to request information from multiple
sources to verify the data and report on potentially compromised information sources.
CWE Version 4.14
CWE-1294: Insecure Security Identifier Mechanism
CWE-1294: Insecure Security Identifier Mechanism