CWE-597 Use of Wrong Operator in String Comparison

variant

The product uses the wrong operator when comparing a string, such as using "==" when the .equals() method should be used instead.

01

übergeordnete Schwächen

Übergeordnete Klassen, zu denen dies gehört.

02

Schwachstellen (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-4259UScritical9.8—
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The man…
CVE-2021-3797UScritical9.8—
hestiacp is vulnerable to Use of Wrong Operator in String Comparison
CVE-2022-36072USmedium5.9—
SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP, hashes generated by built-in functions…
CVE-2026-80579US——
In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videomode fb_set_var() can delete a mode from info->modelist when…
03

Quelle

Wo diese Definition veröffentlicht ist.

scry

Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan