Concept解释冲突

CWE-436

A category in the Common Weakness Enumeration (CWE) referring to a situation where a system interprets the same input as having different meanings across different components, causing security policies to be bypassed.

Timeline (last 90 days)

Oct 14

This class of SAML flaws is usually categorized at the intersection of CWE-436 (Interpretation Conflict) and CWE-347 (Improper Verification of Cryptographic Signature).

Unverified50%

All Facts (1)

Unverified

This class of SAML flaws is usually categorized at the intersection of CWE-436 (Interpretation Conflict) and CWE-347 (Improper Verification of Cryptographic Signature).

50%

Source Articles

Four SAML Vulnerabilities from Report to Fix: Lessons from Signature and Identity Parsing InconsistencyOct 14