CWE-351 - Insufficient Type Distinction

Home/CWEs/CWE info/

CWE-351

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Insufficient Type Distinction

Description: The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Common Consequences: Scope: Other
Impact: Other

Related Weaknesses

CWE-345Insufficient Verification of Data Authenticity

CWE-436Interpretation Conflict

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

CWE top 25 most dangerous software weaknesses

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

Hackers now use AppDomain Injection to drop CobaltStrike beacons

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Microsoft disrupts ONNX phishing-as-a-service infrastructure

Top Alert List

MediumAbsence of Anti-CSRF Tokens

MediumDirectory Browsing

InformationalInformation Disclosure - Suspicious Comments

Content Security Policy (CSP) Header Not Set

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

HighPath Traversal

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

LowCookie without SameSite Attribute

Cross-Domain Misconfiguration

Top CVE List

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability

CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

Common CWEs

CWE-1242 Inclusion of Undocumented Features or Chicken Bits

CWE-670 Always-Incorrect Control Flow Implementation

CWE-1287 Improper Validation of Specified Type of Input

HighCWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

CWE-920 Improper Restriction of Power Consumption

MediumCWE-460 Improper Cleanup on Thrown Exception

CWE-1384 Improper Handling of Physical or Environmental Conditions

LowCWE-774 Allocation of File Descriptors or Handles Without Limits or Throttling

CWE-1389 Incorrect Parsing of Numbers with Different Radices

MediumCWE-532 Insertion of Sensitive Information into Log File

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-351 - Insufficient Type Distinction

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.