CWE-925: CWE-925: Improper Verification of Intent by Broadcast Receiver
Description
View on MITREExtended Description
Extended Description
Technical Details
- Structure
- Simple
- Vulnerability Mapping
- ALLOWED
Applicable To
Security Consequences
Scope
Impact
Mitigation Strategies
Phase
Description
Before acting on the Intent, check the Intent Action to make sure it matches the expected System action.
Detection Methods
No detection method information available for this CWE.
Code Examples & CVEs
No examples or observed CVEs available for this CWE.
CWE Relationships
No relationship information available for this CWE.
Frequently Asked Questions
What is CWE-925: CWE-925: Improper Verification of Intent by Broadcast Receiver?+
CWE-925: CWE-925: Improper Verification of Intent by Broadcast Receiver is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description
What are the security consequences of CWE-925: Improper Verification of Intent by Broadcast Receiver?+
If exploited, CWE-925 (CWE-925: Improper Verification of Intent by Broadcast Receiver) it can compromise Gain Privileges or Assume Identity, leading to outcomes such as Scope: Integrity Another application can impersonate the operating system and cause the software to perform an unintended action..
How do you prevent or mitigate CWE-925: Improper Verification of Intent by Broadcast Receiver?+
Recommended mitigations for CWE-925 include: Before acting on the Intent, check the Intent Action to make sure it matches the expected System action.
Which programming languages are affected by CWE-925: Improper Verification of Intent by Broadcast Receiver?+
CWE-925 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
What is the difference between a CWE and a CVE?+
A CWE (Common Weakness Enumeration) like CWE-925 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.