QwikSec

Security Database

CVE

CWE

Training

CWE Database
/

CWE-1114

Back to CWE list

CWE-1114

Inappropriate Whitespace Style

Base
Incomplete

Description

The source code contains whitespace that is inconsistent across the code or does not follow expected standards for the product.

Common Consequences

Scope

Other

Impact

Increase Analytical Complexity

Scope

Other

Impact

Reduce Maintainability

CVE-2014-1266

Chain: incorrect "goto" in Apple SSL product bypasses certificate validation, allowing Adversary-in-the-Middle (AITM) attack (Apple "goto fail" bug). CWE-705 (Incorrect Control Flow Scoping) -> CWE-561 (Dead Code) -> CWE-295 (Improper Certificate Validation) -> CWE-393 (Return of Wrong Status Code) -> CWE-300 (Channel Accessible by Non-Endpoint). The code's whitespace indentation did not reflect the actual control flow (CWE-1114) and did not explicitly delimit the block (CWE-483), which could have made it more difficult for human code auditors to detect the vulnerability.

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now