logo
Home/CWEs/CWE-173/

CWE-173 - Improper Handling of Alternate Encoding

  • Abstraction:Variant
  • Structure:Simple
  • Status:Draft
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Improper Handling of Alternate Encoding

Description

The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.

Common Consequences

Scope: Access Control

Impact: Bypass Protection Mechanism

Related Weaknesses

CWE-172Encoding Error

CWE-289Authentication Bypass by Alternate Name