1638
Since the regular expression does not have anchors (CWE-777), i.e. is unbounded without ^
or $ characters, then prepending a 0 or 0x to the beginning of the IP address will still result in a
matched regex pattern. Since the ping command supports octal and hex prepended IP addresses,
it will use the unexpectedly valid IP address (CWE-1389). For example, "0x63.63.63.63" would be
considered equivalent to "99.63.63.63". As a result, the attacker could potentially ping systems that
the attacker cannot reach directly.
Observed Examples
Reference Description
CVE-2022-30034 Chain: Web UI for a Python RPC framework does not use regex anchors to
validate user login emails (CWE-777), potentially allowing bypass of OAuth
(CWE-1390).
https://www.cve.org/CVERecord?id=CVE-2022-30034
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1397 Comprehensive Categorization: Comparison 1400 2523
CWE-778: Insufficient Logging
Weakness ID : 778
Structure : Simple
Abstraction : Base
Description
When a security-critical event occurs, the product either does not record the event or omits
important details about the event when logging it.
Extended Description
When security-critical events are not logged properly, such as a failed login attempt, this can
make malicious behavior more difficult to detect and may hinder forensic analysis after an attack
succeeds.
As organizations adopt cloud storage resources, these technologies often require configuration
changes to enable detailed logging information, since detailed logging can incur additional costs.
This could lead to telemetry gaps in critical audit logs. For example, in Azure, the default value for
logging is disabled.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 693 Protection Mechanism Failure 1520
ChildOf 223 Omission of Security-relevant Information 559
Relevant to the view "Architectural Concepts" (CWE-1008)
CWE Version 4.14
CWE-778: Insufficient Logging
CWE-778: Insufficient Logging