Skip to content
OpenAdvisories

Weakness (CWE)

CWE-435: Improper Interaction Between Multiple Correctly-Behaving Entities

Pillar Draft Mapping discouraged

An interaction error occurs when two entities have correct behavior when running independently of each other, but when they are integrated as components in a larger system or process, they introduce incorrect behaviors that may cause resultant weaknesses.

More detail

When a system or process combines multiple independent components, this often produces new, emergent behaviors at the system level. However, if the interactions between these components are not fully accounted for, some of the emergent behaviors can be incorrect or even insecure.

Source: MITRE CWE-435

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2021-34699

    Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

    A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. …

    Cisco Cisco IOS iOS Network devices
  • High 8.8
    CVE-2020-2160

    Cross-Site Request Forgery in Jenkins

    Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven