867
The product does not properly distinguish between different types of elements in a way that leads
to insecure behavior.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 345 Insufficient Verification of Data Authenticity 851
PeerOf 436 Interpretation Conflict 1057
PeerOf 434 Unrestricted Upload of File with Dangerous Type 1048
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1214 Data Integrity Issues 2477
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Other Other
Observed Examples
Reference Description
CVE-2005-2260 Browser user interface does not distinguish between user-initiated and
synthetic events.
https://www.cve.org/CVERecord?id=CVE-2005-2260
CVE-2005-2801 Product does not compare all required data in two separate elements, causing
it to think they are the same, leading to loss of ACLs. Similar to Same Name
error.
https://www.cve.org/CVERecord?id=CVE-2005-2801
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1411 Comprehensive Categorization: Insufficient Verification
of Data Authenticity
1400 2538
Notes
Relationship
Overlaps others, e.g. Multiple Interpretation Errors.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Insufficient Type Distinction
CWE Version 4.14
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-352: Cross-Site Request Forgery (CSRF)