Skip to content
OpenAdvisories

Weakness (CWE)

CWE-435: Improper Interaction Between Multiple Correctly-Behaving Entities

Pillar Draft Mapping discouraged

An interaction error occurs when two entities have correct behavior when running independently of each other, but when they are integrated as components in a larger system or process, they introduce incorrect behaviors that may cause resultant weaknesses.

More detail

When a system or process combines multiple independent components, this often produces new, emergent behaviors at the system level. However, if the interactions between these components are not fully accounted for, some of the emergent behaviors can be incorrect or even insecure.

Source: MITRE CWE-435

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 5.3
    CVE-2023-43052

    IBM Control Center external service interaction

    IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS looku…

    IBM Control Center
  • High 7.7
    CVE-2021-34699

    Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

    A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. …

    Cisco Cisco IOS iOS Network devices
  • Medium 5.3
    CVE-2020-2287

    Request logging bypass in Jenkins Audit Trail Plugin

    Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target…

    Jenkins Project Jenkins Audit Trail Plugin org.jenkins-ci.plugins:audit-trail Web / CMS Maven
  • Low 2.6
    CVE-2020-5255

    Prevent cache poisoning via a Response Content-Type header

    In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response&…

    symfony symfony symfony/symfony symfony Debian Packagist
  • High 8.8
    CVE-2020-2160

    Cross-Site Request Forgery in Jenkins

    Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven