1807
CWE-914: Improper Control of Dynamically-Identified Variables
Weakness ID : 914
Structure : Simple
Abstraction : Base
Description
The product does not properly restrict reading from or writing to dynamically-identified variables.
Extended Description
Many languages offer powerful features that allow the programmer to access arbitrary variables
that are specified by an input string. While these features can offer significant flexibility and reduce
development time, they can be extremely dangerous if attackers can modify unintended variables
that have security implications.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 913 Improper Control of Dynamically-Managed Code Resources 1805
ChildOf 99 Improper Control of Resource Identifiers ('Resource
Injection')