CVEbaza.pl › CWE Dictionary › CWE-160
Common Weakness Enumeration

CWE-160

Improper Neutralization of Leading Special Elements

Category: VariantCVE: 1
Description

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes leading special elements that could be interpreted in unexpected ways when they are sent to a downstream component.

Extended Description

As data is parsed, improperly handled leading special elements may cause the process to take unexpected actions that result in an attack.

CVE vulnerabilities with CWE-160 (1)
8.1
CVSS
HIGH
CVE-2010-0386

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

pub. 2010-01-25
Information
ID: CWE-160
Type: Variant
Vulnerabilities: 1
MITRE CWE ↗
← CWE Dictionary
CWE-160 — Improper Neutralization of Leading Special Elements | CWE Dictionary | CVEbaza.pl