1761
CanPrecede 471 Modification of Assumed-Immutable Data (MAID) 1121
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1012 Cross Cutting 2427
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Undetermined)
Technology : Mobile (Prevalence = Undetermined)
Likelihood Of Exploit
Medium
Common Consequences
Scope Impact Likelihood
Access Control
Availability
Bypass Protection Mechanism
DoS: Crash, Exit, or Restart
Client-side validation checks can be easily bypassed,
allowing malformed or unexpected input to pass into the
application, potentially as trusted data. This may lead to
unexpected states, behaviors and possibly a resulting
crash.
Access Control Bypass Protection Mechanism
Gain Privileges or Assume Identity
Client-side checks for authentication can be easily
bypassed, allowing clients to escalate their access levels
and perform unintended actions.
Potential Mitigations
CWE Version 4.14
CWE-602: Client-Side Enforcement of Server-Side Security
CWE-602: Client-Side Enforcement of Server-Side Security