CWE-446: UI Discrepancy for Security Feature
Filter
The user interface does not correctly enable or configure a security feature, but the interface provides feedback that causes the user to believe that the feature is in a secure state.
What the weakness is: CWE-446 at MITRE. All weaknesses
Ask an AI about CWE-446
Show the prompt
Explain CWE-446: UI Discrepancy for Security Feature and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/446.html and https://cve.bz/cve/cwe/446?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.9CVE-2025-8353EPSS 0.5%
UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state d…
- 8.6CVE-2025-52983EPSS 0.7%
A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device. On VM Host Routing Engines (RE), even if the configure…
- 5.3CVE-2023-1768EPSS 0.9%
Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain con…