CWE-1267: Policy Uses Obsolete Encoding

Base Draft Simple

CWE版本: 4.18

更新日期: 2025-09-09

弱点描述

The product uses an obsolete encoding mechanism to implement access controls.

常见后果

影响范围: Confidentiality Integrity Availability Access Control

技术影响: Modify Memory Read Memory Modify Files or Directories Read Files or Directories DoS: Resource Consumption (Other) Execute Unauthorized Code or Commands Gain Privileges or Assume Identity Bypass Protection Mechanism Reduce Reliability

潜在缓解措施

阶段: Architecture and Design Implementation

有效性: High

引入模式

阶段 说明
Architecture and Design -
Implementation -

适用平台

编程语言
Not Language-Specific (Undetermined)
操作系统
Not OS-Specific (Undetermined)
技术
Not Technology-Specific (Undetermined)
关键信息

CWE ID: CWE-1267

抽象级别: Base

结构: Simple

状态: Draft

相关弱点
相关攻击模式
CAPEC-121 CAPEC-681