1519
This code first reads a specified file into memory, then prints the file if the user is authorized to see
its contents. The read of the file into memory may be resource intensive and is unnecessary if the
user is not allowed to see the file anyway.
Observed Examples
Reference Description
CVE-2019-9805 Chain: Creation of the packet client occurs before initialization is complete
(CWE-696) resulting in a read from uninitialized memory (CWE-908), causing
memory corruption.
https://www.cve.org/CVERecord?id=CVE-2019-9805
CVE-2014-1266 chain: incorrect "goto" in Apple SSL product bypasses certificate validation,
allowing Adversary-in-the-Middle (AITM) attack (Apple "goto fail" bug).
CWE-705 (Incorrect Control Flow Scoping) -> CWE-561 (Dead Code) ->
CWE-295 (Improper Certificate Validation) -> CWE-393 (Return of Wrong
Status Code) -> CWE-300 (Channel Accessible by Non-Endpoint).
https://www.cve.org/CVERecord?id=CVE-2014-1266
CVE-2011-1027 Chain: off-by-one error (CWE-193) leads to infinite loop (CWE-835) using
invalid hex-encoded characters.
https://www.cve.org/CVERecord?id=CVE-2011-1027
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1410 Comprehensive Categorization: Insufficient Control
Flow Management
1400 2536
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
WASC 40 Insufficient Process Validation
Related Attack Patterns
CAPEC-ID Attack Pattern Name
29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
CWE-692: Incomplete Denylist to Cross-Site Scripting
Weakness ID : 692
Structure : Chain
Abstraction : Compound
Description
The product uses a denylist-based protection mechanism to defend against XSS attacks, but the
denylist is incomplete, allowing XSS variants to succeed.
Chain Components
Nature Type ID Name Page
StartsWith 184 Incomplete List of Disallowed Inputs 459
FollowedBy 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')