Umbra Wiki weakness weakness/CWE-436
Back to wiki

CWE-436 — Interpretation Conflict

provenance: imported · CWE: CWE-436

CWE-436: Interpretation Conflict

MITRE CWE weakness

Kind Weakness
Abstraction Class
Status Incomplete
Likelihood of exploit

Description

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.

Common consequences

  • Integrity, Other: Unexpected State, Varies by Context

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/436.html
  • CWE list: https://cwe.mitre.org/data/index.html