CWE-351 - Insufficient Type Distinction

Home/CWEs/CWE info/

CWE-351

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Insufficient Type Distinction

Description: The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Common Consequences: Scope: Other
Impact: Other

Related Weaknesses

CWE-345Insufficient Verification of Data Authenticity

CWE-436Interpretation Conflict

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Truist Bank confirms breach after stolen data shows up on hacking forum

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

Microsoft SharePoint RCE bug exploited to breach corporate network

Google patches actively exploited Android vulnerability (CVE-2024-43093)

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Download: CIS Critical Security Controls v8.1

CISA proposes new security requirements to protect govt, personal data

Top Alert List

MediumDirectory Browsing

InformationalInformation Disclosure - Suspicious Comments

LowCookie without SameSite Attribute

MediumMissing Anti-clickjacking Header

LowCross-Domain JavaScript Source File Inclusion

LowInformation Disclosure - Debug Error Messages

Content Security Policy (CSP) Header Not Set

MediumCSP: Wildcard Directive

HighLog4Shell (CVE-2021-45046)

HighXML External Entity Attack

Top CVE List

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability

CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability

CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability

CVE-2022-24682 Zimbra Webmail Cross-Site Scripting Vulnerability

CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Common CWEs

CWE-96 Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

CWE-85 Doubled Character XSS Manipulations

CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

CWE-1251 Mirrored Regions with Different Values

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

CWE-687 Function Call With Incorrectly Specified Argument Value

HighCWE-457 Use of Uninitialized Variable

CWE-292 DEPRECATED: Trusting Self-reported DNS Name

CWE-766 Critical Data Element Declared Public

CWE-789 Memory Allocation with Excessive Size Value

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-351 - Insufficient Type Distinction

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.