CWE-783—Operator Precedence Logic Error

名称

Operator Precedence Logic Error

描述

The product uses an expression in which operator precedence causes incorrect logic to be used.

While often just a bug, operator precedence logic errors can have serious consequences if they are used in security-critical code, such as making an authentication decision.

常见后果

范围：

Confidentiality, Integrity, Availability

影响：

Varies by Context, Unexpected State

注释：

The consequences will vary based on the context surrounding the incorrect precedence. In a security decision, integrity or confidentiality are the most likely results. Otherwise, a crash may occur due to the software reaching an unexpected state.

相关 CWE

• CWE-670Always-Incorrect Control Flow Implementation