Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CWE-444:Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Weakness ID:444
Version:v4.17
Weakness Name:Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Vulnerability Mapping:Allowed
Abstraction:Base
Structure:Simple
Status:Incomplete
Likelihood of Exploit:
DetailsContent HistoryObserved CVE ExamplesReports
▼Submissions
Submission DateRelease DateSubmitterOrganizationVersionComment
2006-07-192006-07-19PLOVERN/ADraft 3

N/A

Submission Date: 2006-07-19

Release Date: 2006-07-19

Submitter: PLOVER

Organization: N/A

Version: Draft 3

Comment:

N/A

▼Modifications
Modification DateRelease DateModifierOrganizationVersionImportanceComment
2008-07-01N/AEric DalciCigitalN/AN/A

updated Potential_Mitigations, Time_of_Introduction

2008-09-08N/ACWE Content TeamMITREN/AN/A

updated Name, Relationships, Other_Notes, Taxonomy_Mappings

2009-05-27N/ACWE Content TeamMITREN/AN/A

updated Name, Related_Attack_Patterns

2010-02-16N/ACWE Content TeamMITREN/AN/A

updated Taxonomy_Mappings

2011-06-01N/ACWE Content TeamMITREN/AN/A

updated Common_Consequences

2012-05-11N/ACWE Content TeamMITREN/AN/A

updated Common_Consequences, Relationships

2012-10-30N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples, Potential_Mitigations

2014-06-23N/ACWE Content TeamMITREN/AN/A

updated Other_Notes, Potential_Mitigations, Theoretical_Notes

2014-07-30N/ACWE Content TeamMITREN/AN/A

updated Relationships

2015-12-07N/ACWE Content TeamMITREN/AN/A

updated Relationships

2017-11-08N/ACWE Content TeamMITREN/AN/A

updated Applicable_Platforms

2020-02-24N/ACWE Content TeamMITREN/AN/A

updated Applicable_Platforms, Relationships

2021-10-28N/ACWE Content TeamMITREN/AN/A

updated Relationships

2022-04-28N/ACWE Content TeamMITREN/AN/A

updated Related_Attack_Patterns

2022-06-28N/ACWE Content TeamMITREN/AN/A

Extended the abstraction of this entry to include both HTTP request and response smuggling.

2022-06-28N/ACWE Content TeamMITREN/AN/A

updated Alternate_Terms, Common_Consequences, Demonstrative_Examples, Description, Name, Observed_Examples, References, Taxonomy_Mappings

2022-10-13N/ACWE Content TeamMITREN/AN/A

updated Related_Attack_Patterns

2023-04-27N/ACWE Content TeamMITREN/AN/A

updated References, Relationships, Time_of_Introduction

2023-06-29N/ACWE Content TeamMITREN/AN/A

updated Mapping_Notes

Modification Date: 2008-07-01

Release Date: N/A

Modifier: Eric Dalci

Organization: Cigital

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations, Time_of_Introduction

Modification Date: 2008-09-08

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Name, Relationships, Other_Notes, Taxonomy_Mappings

Modification Date: 2009-05-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Name, Related_Attack_Patterns

Modification Date: 2010-02-16

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Taxonomy_Mappings

Modification Date: 2011-06-01

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Common_Consequences

Modification Date: 2012-05-11

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Common_Consequences, Relationships

Modification Date: 2012-10-30

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples, Potential_Mitigations

Modification Date: 2014-06-23

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Other_Notes, Potential_Mitigations, Theoretical_Notes

Modification Date: 2014-07-30

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2015-12-07

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2017-11-08

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Applicable_Platforms

Modification Date: 2020-02-24

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Applicable_Platforms, Relationships

Modification Date: 2021-10-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2022-04-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Related_Attack_Patterns

Modification Date: 2022-06-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

Extended the abstraction of this entry to include both HTTP request and response smuggling.

Modification Date: 2022-06-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Alternate_Terms, Common_Consequences, Demonstrative_Examples, Description, Name, Observed_Examples, References, Taxonomy_Mappings

Modification Date: 2022-10-13

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Related_Attack_Patterns

Modification Date: 2023-04-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated References, Relationships, Time_of_Introduction

Modification Date: 2023-06-29

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Mapping_Notes

▼Contributions
Contributor DateRelease DateTypeContributorOrganizationVersionComment
▼Previous Name Entries
Change DatePrevious Entry NameVersion
2008-04-11

HTTP Request Smuggling

N/A
2008-09-09

Interpretation Conflict in Web Traffic (aka 'HTTP Request Smuggling')

N/A
2009-05-27

Inconsistent Interpretation of HTTP Requests (aka 'HTTP Request Smuggling')

N/A
2022-06-28

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')

N/A

Change Date: 2008-04-11

Version: N/A

Previous Entry Name: HTTP Request Smuggling

Change Date: 2008-09-09

Version: N/A

Previous Entry Name: Interpretation Conflict in Web Traffic (aka 'HTTP Request Smuggling')

Change Date: 2009-05-27

Version: N/A

Previous Entry Name: Inconsistent Interpretation of HTTP Requests (aka 'HTTP Request Smuggling')

Change Date: 2022-06-28

Version: N/A

Previous Entry Name: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')