CWE-1023—Incomplete Comparison with Missing Factors

名称

Incomplete Comparison with Missing Factors

描述

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

常见后果

范围：

Integrity, Access Control

影响：

Alter Execution Logic, Bypass Protection Mechanism

注释：

An incomplete comparison can lead to resultant weaknesses, e.g., by operating on the wrong object or making a security decision without considering a required factor.

相关 CWE

• CWE-697Incorrect Comparison