CWE-691 - Insufficient Control Flow Management

Home/CWEs/CWE info/

CWE-691

Abstraction:
Pillar

Structure:
Simple

Status:
Draft

Weakness Name: Insufficient Control Flow Management

Description: The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Common Consequences: Scope: Other
Impact: Alter Execution Logic

Release Date:
2008-04-11

Latest Modification Date:
2024-02-29

Latest Security News

Adobe warns of critical ColdFusion bug with PoC exploit code

Non-Human Identities Gain Momentum, Requires Both Management, Security

FTC orders Marriott and Starwood to implement strict data security

Premium WPLMS WordPress plugins address seven critical flaws

US court finds spyware maker NSO liable for WhatsApp hacks

How CISOs Can Communicate With Their Boards Effectively

Middle East Cyberwar Rages On, With No End in Sight

Name That Toon: Sneaking Around

Common Alerts

HighViewstate without MAC Signature (Sure)

MediumCSP: script-src unsafe-eval

HighCloud Metadata Potentially Exposed

MediumHTTP to HTTPS Insecure Transition in Form Post

InformationalSec-Fetch-Mode Header is Missing

HighSource Code Disclosure - File Inclusion

MediumContent Security Policy (CSP) Header Not Set

MediumX-Frame-Options Defined via META (Non-compliant with Spec)

InformationalASP.NET ViewState Disclosure

InformationalAuthentication Request Identified

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

MediumCWE-117 Improper Output Neutralization for Logs

MediumCWE-1004 Sensitive Cookie Without 'HttpOnly' Flag

CWE-594 J2EE Framework: Saving Unserializable Objects to Disk

LowCWE-333 Improper Handling of Insufficient Entropy in TRNG

CWE-804 Guessable CAPTCHA

LowCWE-64 Windows Shortcut Following (.LNK)

CWE-183 Permissive List of Allowed Inputs

CWE-277 Insecure Inherited Permissions

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-560 Use of umask() with chmod-style Argument

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-691 - Insufficient Control Flow Management

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.