1827
Nature Type ID Name Page
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Relationship
There is an overlapping relationship between insecure storage of sensitive information
(CWE-922) and missing encryption of sensitive information (CWE-311). Encryption is often used
to prevent an attacker from reading the sensitive data. However, encryption does not prevent
the attacker from erasing or overwriting the data. While data tampering would be visible upon
inspection, the integrity and availability of the data is compromised prior to the audit.
Maintenance
This is a high-level entry that includes children from various parts of the CWE research view
(CWE-1000). Currently, most of the information is in these child entries. This entry will be made
more comprehensive in later CWE versions.
CWE-923: Improper Restriction of Communication Channel to Intended
Endpoints
Weakness ID : 923
Structure : Simple
Abstraction : Class
Description
The product establishes a communication channel to (or from) an endpoint for privileged or
protected operations, but it does not properly ensure that it is communicating with the correct
endpoint.
Extended Description
Attackers might be able to spoof the intended endpoint from a different system or process, thus
gaining the same level of access as the intended endpoint.
While this issue frequently involves authentication between network-based clients and servers,
other types of communication channels and endpoints can have this weakness.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
ParentOf 291 Reliance on IP Address for Authentication 708
ParentOf 297 Improper Validation of Certificate with Host Mismatch 722
ParentOf 300 Channel Accessible by Non-Endpoint 730
ParentOf 419 Unprotected Primary Channel 1017
CWE Version 4.14
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints