Description

The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Applicable Platforms
Language Class: All

Time Of Introduction

• Architecture and Design
• Implementation

Related Attack Patterns

• CAPEC-111
• CAPEC-141
• CAPEC-142
• CAPEC-209
• CAPEC-218
• CAPEC-384
• CAPEC-385
• CAPEC-386
• CAPEC-387
• CAPEC-388
• CAPEC-389
• CAPEC-4

Common Consequences

Detection Methods
None

Potential Mitigations
None

Relationships
"origin validation" could fall under this.

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings

References:

1. Michael Howard David LeBlanc John Viega .24 Deadly Sins of Software Security. McGraw-Hill. Section:'"Sin 15: Not Updating Easily." Page 231'. Published on 2010.