1530
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding POS36-
C
CWE More
Abstract
Observe correct revocation order while
relinquishing privileges
Related Attack Patterns
CAPEC-ID Attack Pattern Name
463 Padding Oracle Crypto Attack
CWE-697: Incorrect Comparison
Weakness ID : 697
Structure : Simple
Abstraction : Pillar
Description
The product compares two entities in a security-relevant context, but the comparison is incorrect,
which may lead to resultant weaknesses.
Extended Description
This Pillar covers several possibilities:
• the comparison checks one factor incorrectly;
• the comparison should consider multiple factors, but it does not check at least one of those
factors at all;
• the comparison checks the wrong factor.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
MemberOf 1000 Research Concepts 2575
ParentOf 183 Permissive List of Allowed Inputs 458
ParentOf 185 Incorrect Regular Expression 463
ParentOf 581 Object Model Violation: Just One of Equals and Hashcode
Defined