COMMON WEAKNESS ENUMERATIONIncomplete

CWE-430

Deployment of Wrong Handler

The wrong "handler" is assigned to process an object.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The wrong "handler" is assigned to process an object.

Extended description

An example of deploying the wrong handler would be calling a servlet to reveal source code of a .JSP file, or automatically "determining" type of the object even if it is contradictory to an explicitly specified type.

Root cause

How and when does the problem arise?

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Varies by ContextUnexpected State

Affected security scopes: Integrity, Other

Defence

How is it prevented and fixed?

Architecture and Design

Architecture and design approach

Detail
Perform a type check before interpreting an object.

Architecture and Design

Architecture and design approach

Detail
Reject any inconsistent types, such as a file with a .GIF extension that appears to consist of PHP code.
CWE-430: Common Weakness Enumeration Entry CWE-430 · DayBreach Sözlük · DayBreach