Categories

The software performs a comparison that only examines a portion of a factor before determining whether there is a match, such as a substring, leading to resultant weaknesses.

The system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.

The software does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

The software performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.

The software implements an authentication technique, but it skips a step that weakens the technique.

The application contains code that appears to be malicious in nature.

The software performs a data query with a large number of joins and sub-queries on a large data table.

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

The software does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.