CWE-941: Incorrectly Specified Destination in a Communication Channel
Description
The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Access ControlOther
Gain Privileges or Assume Identity; Varies by Context; Bypass Protection Mechanism
An attacker can access any functionality that is inadvertently accessible to the source.
Related weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.