CWE-436—Interpretation Conflict

Weakness Name

Interpretation Conflict

Description

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.

Common Consequences

Scope:

Integrity, Other

Impact:

Unexpected State, Varies by Context

Related Weaknesses

• CWE-435Improper Interaction Between Multiple Correctly-Behaving Entities

Related Alerts

• Charset MismatchInformational