2261
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1411 Comprehensive Categorization: Insufficient Verification
of Data Authenticity
1400 2538
References
[REF-1257]Christian Schneider. "Cross-Site WebSocket Hijacking (CSWSH)". 2013 September 1.
< https://christian-schneider.net/CrossSiteWebSocketHijacking.html >.
[REF-1251]Drew Branch. "WebSockets not Bound by SOP and CORS? Does this mean...".
2018 June 6. < https://blog.securityevaluators.com/websockets-not-bound-by-cors-does-thismean-
2e7819374acc >.
[REF-1252]Mehul Mohan. "How to secure your WebSocket connections". 2018 November 2. <
https://www.freecodecamp.org/news/how-to-secure-your-websocket-connections-d0be0996c556/
>.
[REF-1256]Vickie Li. "Cross-Site WebSocket Hijacking (CSWSH)". 2019 November 7. < https://
medium.com/swlh/hacking-websocket-25d3cba6a4b9 >.
[REF-1253]PortSwigger. "Testing for WebSockets security vulnerabilities". < https://
portswigger.net/web-security/websockets >.2023-04-07.
CWE-1386: Insecure Operation on Windows Junction / Mount Point
Weakness ID : 1386
Structure : Simple
Abstraction : Base
Description
The product opens a file or directory, but it does not properly prevent the name from being
associated with a junction or mount point to a destination that is outside of the intended control
sphere.
Extended Description
Depending on the intended action being performed, this could allow an attacker to cause the
product to read, write, delete, or otherwise operate on unauthorized files.
In Windows, NTFS5 allows for file system objects called reparse points. Applications can create
a hard link from one directory to another directory, called a junction point. They can also create
a mapping from a directory to a drive letter, called a mount point. If a file is used by a privileged
program, but it can be replaced with a hard link to a sensitive file (e.g., AUTOEXEC.BAT), an
attacker could excalate privileges. When the process opens the file, the attacker can assume the
privileges of that process, tricking the privileged process to read, modify, or delete the sensitive file,
preventing the program from accurately processing data. Note that one can also point to registries
and semaphores.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
CWE Version 4.14
CWE-1386: Insecure Operation on Windows Junction / Mount Point
CWE-1386: Insecure Operation on Windows Junction / Mount Point