1075
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER User interface inconsistency
CWE-447: Unimplemented or Unsupported Feature in UI
Weakness ID : 447
Structure : Simple
Abstraction : Base
Description
A UI function for a security feature appears to be supported and gives feedback to the user that
suggests that it is supported, but the underlying functionality is not implemented.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 446 UI Discrepancy for Security Feature 1073
ChildOf 671 Lack of Administrator Control over Security 1478
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 355 User Interface Security Issues 2320
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Other Varies by Context
Potential Mitigations
Phase: Testing
Perform functionality testing before deploying the application.
Observed Examples
Reference Description
CVE-2000-0127 GUI configuration tool does not enable a security option when a checkbox
is selected, although that option is honored when manually set in the
configuration file.
https://www.cve.org/CVERecord?id=CVE-2000-0127
CVE-2001-0863 Router does not implement a specific keyword when it is used in an ACL,
allowing filter bypass.
https://www.cve.org/CVERecord?id=CVE-2001-0863
CVE-2001-0865 Router does not implement a specific keyword when it is used in an ACL,
allowing filter bypass.
https://www.cve.org/CVERecord?id=CVE-2001-0865
CVE-2004-0979 Web browser does not properly modify security setting when the user sets it.
https://www.cve.org/CVERecord?id=CVE-2004-0979
CWE Version 4.14
CWE-448: Obsolete Feature in UI
CWE-448: Obsolete Feature in UI