CWE-1023

Incomplete Comparison with Missing Factors

Medium

Description

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

Potential Impact

How to Fix

Testing

Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1023 vulnerabilities in your codebase.

Get Security Assessment