2326
channels and alternate paths. Some of these can overlap virtual file problems and are commonly
used in "bypass" attacks, such as those that exploit authentication errors.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 322 Key Exchange without Entity Authentication 699 788
HasMember 346 Origin Validation Error 699 853
HasMember 385 Covert Timing Channel 699 940
HasMember 419 Unprotected Primary Channel 699 1017
HasMember 420 Unprotected Alternate Channel 699 1018
HasMember 425 Direct Request ('Forced Browsing') 699 1025
HasMember 515 Covert Storage Channel 699 1220
HasMember 918 Server-Side Request Forgery (SSRF) 699 1820
HasMember 924 Improper Enforcement of Message Integrity During
Transmission in a Communication Channel
699 1830
HasMember 940 Improper Verification of Source of a Communication
Channel
699 1842
HasMember 941 Incorrectly Specified Destination in a Communication
Channel
699 1845
HasMember 1327 Binding to an Unrestricted IP Address 699 2215
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER CHAP.VIR TFILE Channel and Path Errors
Notes
Research Gap
Most of these issues are probably under-studied. Only a handful of public reports exist.
Category-429: Handler Errors
Category ID : 429
Summary
Weaknesses in this category are related to improper management of handlers.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 430 Deployment of Wrong Handler 699 1042
HasMember 431 Missing Handler 699 1043
HasMember 434 Unrestricted Upload of File with Dangerous Type 699 1048
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Handler Errors
Category-438: Behavioral Problems
Category ID : 438
CWE Version 4.14
CWE-452: Initialization and Cleanup Errors
CWE-452: Initialization and Cleanup Errors