579
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 233 Improper Handling of Parameters 574
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
Observed Examples
Reference Description
CVE-2003-1014 MIE. multiple gateway/security products allow restriction bypass using multiple
MIME fields with the same name, which are interpreted differently by clients.
https://www.cve.org/CVERecord?id=CVE-2003-1014
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Relationship
This type of problem has a big role in multiple interpretation vulnerabilities and various HTTP
attacks.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Extra Parameter Error
Related Attack Patterns
CAPEC-ID Attack Pattern Name
460 HTTP Parameter Pollution (HPP)
CWE-236: Improper Handling of Undefined Parameters
Weakness ID : 236
Structure : Simple
Abstraction : Variant
Description
The product does not handle or incorrectly handles when a particular parameter, field, or argument
name is not defined or supported by the product.
Relationships
CWE Version 4.14
CWE-237: Improper Handling of Structural Elements
CWE-237: Improper Handling of Structural Elements