Fallos del tipo CWE-697

112 resultados

Comparação Incorreta

Ocorre quando o código compara valores usando lógica errada — operador inadequado, tipos incompatíveis ou precedência de operadores mal interpretada — levando a decisões de segurança falharem silenciosamente. Um atacante pode contornar validações, autenticação ou verificações de autorização explorando essa lógica defeituosa.

Ejemplo

Um sistema valida senha fazendo `if (input == passwordHash)` em vez de usar função de comparação constante; ou verifica permissão com `if (userRole = 'admin')` (atribuição) em vez de `if (userRole == 'admin')` (comparação), permitindo bypass.

Cómo mitigar

Use operadores de comparação corretos (== vs = vs ===), implemente testes unitários que cobrem casos limítrofes, e para dados sensíveis (senhas, tokens) empregue funções de comparação timing-safe que não vazem informações por tempo de execução.

CVE-2026-104198MEDIUMZoneMinder failed token handling bypasses web authenticationEPSS 0.4%CVE-2026-90977MEDIUMClean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session ComparisonEPSS 0.4%CVE-2026-14617LOWNousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivityEPSS 0.4%CVE-2026-101912MEDIUMip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its rangeEPSS 0.4%CVE-2025-47416MEDIUMConsoleFindCommandMatchListEPSS 0.4%CVE-2026-80227LOWSQL string_trim removes only spaces, diverging from in-memory trimming in AshSqlEPSS 0.4%CVE-2026-91851MEDIUMMISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag ComparisonEPSS 0.4%CVE-2026-61672HIGHCapsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementEPSS 0.3%CVE-2026-92395CRITICAL@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetEPSS 0.3%CVE-2026-65903MEDIUMDOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGSEPSS 0.3%CVE-2026-14686MEDIUMHdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparisonEPSS 0.3%CVE-2026-45569HIGHRoxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)EPSS 0.3%CVE-2026-49340HIGHgonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the hostEPSS 0.3%CVE-2026-102715HIGHmDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packetEPSS 0.3%CVE-2026-71855MEDIUMSuricata flow: IPv4/IPv6 hash collision can reuse wrong flow stateEPSS 0.3%CVE-2026-20765MEDIUMIncorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of pEPSS 0.3%CVE-2026-108969MEDIUMitsmeravitejak Online-Examination-System Session session.php checkLogin comparisonEPSS 0.3%CVE-2026-106252HIGHIncorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code insideEPSS 0.3%CVE-2026-44196CRITICALPingvin Share X: TOTP Authentication Bypass via Password-only LoginEPSS 0.3%CVE-2026-32322MEDIUMsoroban-sdk: `Fr` scalar field equality comparison bypasses modular reductionEPSS 0.3%