COMMON WEAKNESS ENUMERATIONIncomplete

CWE-430

Deployment of Wrong Handler

The wrong "handler" is assigned to process an object.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The wrong "handler" is assigned to process an object.

Genişletilmiş açıklama

An example of deploying the wrong handler would be calling a servlet to reveal source code of a .JSP file, or automatically "determining" type of the object even if it is contradictory to an explicitly specified type.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Varies by ContextUnexpected State

Etkilenen güvenlik alanları: Integrity, Other

Savunma

Nasıl önlenir ve çözülür?

Architecture and Design

Mimari ve tasarım yaklaşımı

Detay
Perform a type check before interpreting an object.

Architecture and Design

Mimari ve tasarım yaklaşımı

Detay
Reject any inconsistent types, such as a file with a .GIF extension that appears to consist of PHP code.