862
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 345 Insufficient Verification of Data Authenticity 851
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1019 Validate Inputs 2433
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1214 Data Integrity Issues 2477
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control
Integrity
Bypass Protection Mechanism
Modify Application Data
An attacker could package untrusted data with trusted data
to bypass protection mechanisms to gain access to and
possibly modify sensitive data.
Observed Examples
Reference Description
CVE-2002-0018 Does not verify that trusted entity is authoritative for all entities in its response.
https://www.cve.org/CVERecord?id=CVE-2002-0018
CVE-2006-5462 use of extra data in a signature allows certificate signature forging
https://www.cve.org/CVERecord?id=CVE-2006-5462
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 860 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 17 - Runtime Environment (ENV)
844 2370
MemberOf 884 CWE Cross-section 884 2567
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1150 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 16. Runtime Environment (ENV)
1133 2452
MemberOf 1365 ICS Communications: Unreliability 1358 2502
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1373 ICS Engineering (Construction/Deployment): Trust
Model Problems
1358 2510
MemberOf 1411 Comprehensive Categorization: Insufficient Verification
of Data Authenticity
1400 2538
Taxonomy Mappings
CWE Version 4.14
CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action