1083
This entry should be broken down into more precise entries. See extended description.
Research Gap
Misrepresentation problems are frequently studied in web browsers, but there are no known
efforts for classifying these kinds of problems in terms of the shortcomings of the interface. In
addition, many misrepresentation issues are resultant.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER UI Misrepresentation of Critical
Information
Related Attack Patterns
CAPEC-ID Attack Pattern Name
98 Phishing
154 Resource Location Spoofing
163 Spear Phishing
164 Mobile Phishing
173 Action Spoofing
References
[REF-434]David Wheeler. "Secure Programming for Linux and Unix HOWTO". 2003 March 3. <
http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/semantic-attacks.html
>.2023-04-07.
CWE-453: Insecure Default Variable Initialization
Weakness ID : 453
Structure : Simple
Abstraction : Variant
Description
The product, by default, initializes an internal variable with an insecure or less secure value than is
possible.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1188 Initialization of a Resource with an Insecure Default 1974
Applicable Platforms
Language : PHP (Prevalence = Sometimes)
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity Modify Application Data
An attacker could gain access to and modify sensitive data
or system information.
CWE Version 4.14
CWE-453: Insecure Default Variable Initialization
CWE-453: Insecure Default Variable Initialization