CWE-348—Use of Less Trusted Source

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-348
摘要：
Base
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Use of Less Trusted Source

描述

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism, Gain Privileges or Assume Identity
注释：
An attacker could utilize the untrusted data source to bypass protection mechanisms and gain access to sensitive data.

相关 CWE

browse all CWEs