1060
Abstraction : Base
Description
A product acts as an intermediary or monitor between two or more endpoints, but it does not have
a complete model of an endpoint's features, behaviors, or state, potentially causing the product to
perform incorrect actions based on this incomplete model.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 436 Interpretation Conflict 1057
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 438 Behavioral Problems 2326
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity
Other
Unexpected State
Varies by Context
Demonstrative Examples
Example 1:
HTTP request smuggling is an attack against an intermediary such as a proxy. This attack works
because the proxy expects the client to parse HTTP headers one way, but the client parses them
differently.
Example 2:
Anti-virus products that reside on mail servers can suffer from this issue if they do not know how a
mail client will handle a particular attachment. The product might treat an attachment type as safe,
not knowing that the client's configuration treats it as executable.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 957 SFP Secondary Cluster: Protocol Error 888 2398
MemberOf 1398 Comprehensive Categorization: Component Interaction 1400 2524
Notes
Relationship
This can be related to interaction errors, although in some cases, one of the endpoints is not
performing correctly according to specification.
Taxonomy Mappings
CWE Version 4.14
CWE-439: Behavioral Change in New Version or Environment
CWE-439: Behavioral Change in New Version or Environment