Comparison Using Wrong Factors
CWE-1025
The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities.
We track 12 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0.
Latest Comparison Using Wrong Factors vulnerabilities
- 7.8 High severity
aws-api-mcp-server: Incorrect Authorization
Incorrect normalization of operation names in the custom security policy enforcement in awslabs aws-api-mcp-server before 1.5.1 might allow an actor to execute AWS API operations across AWS services that the operator's security policy was configured to deny or
- 8.1 High severity
Red Hat Enterprise Linux 10: Comparison Using Wrong Factors
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same
- 7.5 High severity
Apache Tomcat: Missing Release of Resource after Effective Lifetime
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 thr
- 7.2 High severity
Blazar: Comparison Using Wrong Factors
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/leases/{lease_id}). The policy authorize() wrapper attempts to load the target lease t
- 7.7 High severity
CyberPanel: Comparison Using Wrong Factors
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query filter rather than a Python "if" statement.
- 7.5 High severity
PocketMine-MP: Comparison Using Wrong Factors
PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the serv
- 7.5 High severity
arcadedb: Comparison Using Wrong Factors
ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to
- 8.7 High severity
stoatchat: Comparison Using Wrong Factors
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be given a message limit of zero, which the database interprets as 'no limit'. A rem
- 8.1 High severity
Red Hat build of Keycloak 26.4: Comparison Using Wrong Factors
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path wit
- 8.1 High severity
zebrad: Comparison Using Wrong Factors
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By carefully submitting a transa
- 9.3 Critical severity
misskey: Origin Validation Error
Misskey is an open source, federated social media platform. The patch for CVE-2024-52591 did not sufficiently validate the relation between the `id` and `url` fields of ActivityPub objects. An attacker can forge an object where they claim authority in the `url
- 8.6 High severity
Cisco Firepower Threat Defense Software: Comparison Using Wrong Factors
Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This vulnerability is due to an incorrec