CWE-480: Use of Incorrect Operator
The product accidentally uses the wrong operator, which changes the logic in security-relevant ways.
A kind of CWE-670 Always-Incorrect Control Flow Implementation.
From the CWE List. © The MITRE Corporation.
Newest
- hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery 8.3 High
- apache software foundation kafka Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request. 6.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 7.3 High
- keystonejs keystone Keystone: `graphql.maxTake` bypass with negative `take` 7.5 High
- hmbrand dbi::sql::nano DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text 9.8 Critical
- envoyproxy envoy Envoy: Abnormal process termination in DNS UDP filter 5.9 Medium
- danifus pyzipper pyzipper: Encryption bypass for small files encrypted with pyzipper 6.2 Medium
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 more netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry 9.4 Critical
- freebsd pf silently ignores certain rules 7.5 High
- juniper junos os evolved Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching 6.9 Medium
- asterisk Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests 5.8 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 more Use of Incorrect Operator in polonel/trudesk 9.1 Critical
- proxy.py project proxy.py Logic error in authentication in proxy.py 7.5 High