CWE-573
Improper Following of Specification by Caller
Description
The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.
When leveraging external functionality, such as an API, it is important that the caller does so in accordance with the requirements of the external functionality or else unintended behaviors may result, possibly leaving the system vulnerable to any number of exploits.
Parent Weaknesses (ChildOf)
Common Consequences
Scope
Impact
Quality Degradation, Varies by Context
CVE-2006-7140Crypto implementation removes padding when it shouldn't, allowing forged signatures
CVE-2006-4339Crypto implementation removes padding when it shouldn't, allowing forged signatures
Applicable Platforms
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now