This page is experimental and may change significantly in future releases.
Incorrect Comparison Logic Granularity
Properties
id: d3f:CWE-1254
- name
- Incorrect Comparison Logic Granularity
- definition
- The product's comparison logic is performed over a series of steps rather than across the entire string in one operation. If there is a comparison logic failure on one of these steps, the operation may be vulnerable to a timing attack that can result in the interception of the process for nefarious purposes.
Neighbors
CWE-1254 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-1254 has no related weaknesses in this release.