CWE-187

Partial String Comparison

Medium

Description

The product performs a comparison that only examines a portion of a factor before determining whether there is a match, such as a substring, leading to resultant weaknesses.

Potential Impact

How to Fix

Testing

Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-187 vulnerabilities in your codebase.

Get Security Assessment