Falhas do tipo CWE-1025

19 resultados

Comparação usando fatores incorretos

Ocorre quando o código compara valores ou objetos usando critérios parciais ou inadequados, deixando de considerar fatores importantes para a validação correta. Isso pode permitir que valores diferentes sejam tratados como equivalentes, contornando verificações de segurança ou lógica de negócio.

Exemplo

Um sistema compara apenas o domínio de um email para validar se dois usuários são do mesmo departamento, ignorando o subdomínio. Dois emails 'alice@empresa.com' e 'bob@filial.empresa.com' passam na validação como se fossem do mesmo grupo, quando na verdade pertencem a entidades diferentes, permitindo acesso indevido.

Como mitigar

Identifique todos os atributos relevantes para a comparação (domínio completo, tipo de objeto, versão, hash completo, etc) e inclua-os explicitamente na lógica de validação. Revise testes de segurança focando em casos onde diferenças sutis poderiam ser ignoradas erroneamente.

CVE-2025-32464MEDIUMHAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling ofEPSS 0.8%CVE-2025-71377HIGHstoatchat before 20250210-1 Unrestricted Message History FetchEPSS 0.7%CVE-2026-9800HIGHKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonEPSS 0.7%CVE-2026-78619CRITICALPunk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numericallyEPSS 0.6%CVE-2024-20342MEDIUMCisco Firepower Threat Defense Software Rate Filter Bypass VulnerabilityEPSS 0.5%CVE-2026-40880HIGHZebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip BlocksEPSS 0.4%CVE-2026-75840HIGHArcadeDB before 26.8.1 Arbitrary File Read via Unescaped RegexEPSS 0.4%CVE-2026-93854HIGHIn OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2EPSS 0.4%CVE-2025-27839LOWoperations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuinEPSS 0.4%CVE-2026-48860HIGHDistribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distEPSS 0.3%CVE-2023-54390HIGHPocketMine-MP before 5.3.1 Denial of Service via LoginPacketEPSS 0.3%CVE-2026-29811HIGHCyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normalEPSS 0.3%CVE-2026-79677HIGHApache Tomcat: WebSocket DoS due to lost asynchronous write timeoutEPSS 0.3%CVE-2025-2887MEDIUMFailure to detect delegated target rollback in toughEPSS 0.3%CVE-2025-2888MEDIUMImproper timestamp caching during snapshot rollback in toughEPSS 0.3%CVE-2026-40227MEDIUMIn systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.EPSS 0.3%CVE-2026-21691MEDIUMiccDEV has Type Confusion in CIccTag:IsTypeCompressed()EPSS 0.3%CVE-2025-25306CRITICALMisskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated NotesEPSS 0.2%CVE-2026-14441MEDIUMLogic flaw in SANnav Java cache key handling object comparison handlingEPSS —