Fallos del tipo CWE-697

103 resultados

Comparação Incorreta

Ocorre quando o código compara valores usando lógica errada — operador inadequado, tipos incompatíveis ou precedência de operadores mal interpretada — levando a decisões de segurança falharem silenciosamente. Um atacante pode contornar validações, autenticação ou verificações de autorização explorando essa lógica defeituosa.

Ejemplo

Um sistema valida senha fazendo `if (input == passwordHash)` em vez de usar função de comparação constante; ou verifica permissão com `if (userRole = 'admin')` (atribuição) em vez de `if (userRole == 'admin')` (comparação), permitindo bypass.

Cómo mitigar

Use operadores de comparação corretos (== vs = vs ===), implemente testes unitários que cobrem casos limítrofes, e para dados sensíveis (senhas, tokens) empregue funções de comparação timing-safe que não vazem informações por tempo de execução.

CVE-2023-23766MEDIUMIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingEPSS 0.6%CVE-2023-23764MEDIUMIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingEPSS 0.6%CVE-2022-35091MEDIUMSWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()EPSS 0.6%CVE-2026-55771HIGHCedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilitiesEPSS 0.6%CVE-2026-14687MEDIUM666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparisonEPSS 0.5%CVE-2025-48952CRITICALNetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHPEPSS 0.5%CVE-2026-75110CRITICALMemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRETEPSS 0.5%CVE-2025-54336CRITICALIn Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, EPSS 0.5%CVE-2024-23903MEDIUMJenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the pEPSS 0.5%CVE-2026-34210MEDIUMmppx has Stripe charge credential replay via missing idempotency checkEPSS 0.5%CVE-2026-73309CRITICALXenForo < 2.3.13 Authentication Bypass via OAuth2 Token EndpointEPSS 0.5%CVE-2026-64836HIGHICEcoder through 8.1 Path Traversal via Ineffective File::check() ConfinementEPSS 0.4%CVE-2026-57222MEDIUMSuricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6EPSS 0.4%CVE-2015-6964MEDIUMMultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiEPSS 0.4%CVE-2026-49340HIGHgonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the hostEPSS 0.4%CVE-2025-9401MEDIUMHuangDou UTCMS Login login.php comparisonEPSS 0.4%CVE-2024-29026HIGHOwncast cross origin requestEPSS 0.4%CVE-2024-28246MEDIUMKaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocolsEPSS 0.4%CVE-2026-59890MEDIUMsetuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+EPSS 0.4%CVE-2021-20219—A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local aEPSS 0.4%