Skip to content
OpenAdvisories

Weakness (CWE)

CWE-435: Improper Interaction Between Multiple Correctly-Behaving Entities

Pillar Draft Mapping discouraged

An interaction error occurs when two entities have correct behavior when running independently of each other, but when they are integrated as components in a larger system or process, they introduce incorrect behaviors that may cause resultant weaknesses.

More detail

When a system or process combines multiple independent components, this often produces new, emergent behaviors at the system level. However, if the interactions between these components are not fully accounted for, some of the emergent behaviors can be incorrect or even insecure.

Source: MITRE CWE-435

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-43052

    IBM Control Center external service interaction

    IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS looku…

    IBM Control Center
  • Medium 5.3
    CVE-2020-2287

    Request logging bypass in Jenkins Audit Trail Plugin

    Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target…

    Jenkins Project Jenkins Audit Trail Plugin org.jenkins-ci.plugins:audit-trail Web / CMS Maven