CWE-351 - Insufficient Type Distinction

Home/CWEs/CWE info/

CWE-351

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Insufficient Type Distinction

Description: The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Common Consequences: Scope: Other
Impact: Other

Related Weaknesses

CWE-345Insufficient Verification of Data Authenticity

CWE-436Interpretation Conflict

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Recorded Future CEO applauds "undesirable" designation by Russia

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

MediumMissing Anti-clickjacking Header

CSP

InformationalRe-examine Cache-control Directives

LowCookie without SameSite Attribute

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

Common CWEs

CWE-1124 Excessively Deep Nesting

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

HighCWE-76 Improper Neutralization of Equivalent Special Elements

LowCWE-1038 Insecure Automated Optimizations

HighCWE-426 Untrusted Search Path

CWE-49 Path Equivalence: 'filename/' (Trailing Slash)

CWE-1066 Missing Serialization Control Element

HighCWE-242 Use of Inherently Dangerous Function

CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere

CWE-1239 Improper Zeroization of Hardware Register

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-351 - Insufficient Type Distinction

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.