CWE-923
Overview
- CWE ID
- 923
- CWE Name
- Improper Restriction of Communication Channel to Intended Endpoints
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The software establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
Extended Description
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 284 | 1000 | ChildOf | Primary |