859
Reference Description
CVE-2005-2181 Insufficient verification allows spoofing.
https://www.cve.org/CVERecord?id=CVE-2005-2181
CVE-2005-2182 Insufficient verification allows spoofing.
https://www.cve.org/CVERecord?id=CVE-2005-2182
CVE-2002-1706 Accepts a configuration file without a Message Integrity Check (MIC) signature.
https://www.cve.org/CVERecord?id=CVE-2002-1706
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 859 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 16 - Platform Security (SEC)
844 2369
MemberOf 884 CWE Cross-section 884 2567
MemberOf 959 SFP Secondary Cluster: Weak Cryptography 888 2398
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
MemberOf 1402 Comprehensive Categorization: Encryption 1400 2527
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Improperly Verified Signature
The CERT Oracle Secure
Coding Standard for Java
(2011)
SEC06-J Do not rely on the default automatic
signature verification provided by
URLClassLoader and java.util.jar
ISA/IEC 62443 Part 3-3 Req SR 1.9
ISA/IEC 62443 Part 4-1 Req SM-6
ISA/IEC 62443 Part 4-2 Req EDR 3.12
ISA/IEC 62443 Part 4-2 Req NDR 3.12
ISA/IEC 62443 Part 4-2 Req HDR 3.12
Related Attack Patterns
CAPEC-ID Attack Pattern Name
463 Padding Oracle Crypto Attack
475 Signature Spoofing by Improper Validation
CWE-348: Use of Less Trusted Source
Weakness ID : 348
Structure : Simple
Abstraction : Base
Description
The product has two different sources of the same data or information, but it uses the source that
has less support for verification, is less trusted, or is less resistant to attack.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
CWE Version 4.14
CWE-348: Use of Less Trusted Source
CWE-348: Use of Less Trusted Source