CWE-178: Improper Handling of Case Sensitivity
BaseIncomplete
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
View on MITREBack to CWE Lookup
Extended Description
Improperly handled case sensitive data can lead to several possible consequences, including: case-insensitive passwords reducing the size of the key space, making brute force attacks easier bypassing filters or access controls using alternate names multiple interpretation errors using alternate names.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific