Weakness (CWE)
CWE-187: Partial String Comparison
Variant Incomplete
The product performs a string comparison that only examines a portion of the string before determining whether there is a match.
How to prevent it (1 mitigation)
-
Testing
Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.
Source: MITRE CWE-187
0 results · Clear filters · Feed
Nothing found.