logo

CWE-436 - Interpretation Conflict

  • Abstraction:Class
  • Structure:Simple
  • Status:Incomplete
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Interpretation Conflict

Description

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.

Common Consequences

Scope: Integrity, Other

Impact: Unexpected State, Varies by Context

Related Weaknesses

Related Alerts