CWEweakness

CWE-449 The UI Performs the Wrong Action

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The UI performs the wrong action with respect to the user's request.

Common consequences

• Other: Quality Degradation, Varies by Context

Detection methods

• Manual Analysis: Perform extensive functionality testing of the UI. The UI should behave as specified.

Observed examples

• CVE-2001-1387: Network firewall accidentally implements one command line option as if it were another, possibly leading to behavioral infoleak. • CVE-2001-0081: Command line option correctly suppresses a user prompt but does not properly disable a feature, although when the product prompts the user, the feature is properly disabled. • CVE-2002-1977: Product does not "time out" according to user specification, leaving sensitive data available after it has expired.

Related

Observed example · CVE (3)

  • CVE-2002-1977 Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow… vulnerability
  • CVE-2001-1387 iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes… vulnerability
  • CVE-2001-0081 swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could… vulnerability

Child of · CWE (1)

  • CWE-446 UI Discrepancy for Security Feature weakness

Referenced by CVE · weakness (14)

  • CVE-2025-13637 Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage… vulnerability
  • CVE-2025-56139 LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user… vulnerability
  • CVE-2025-49736 The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. vulnerability
  • CVE-2025-26643 The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. vulnerability
  • CVE-2025-21404 Microsoft Edge (Chromium-based) Spoofing Vulnerability vulnerability
  • CVE-2024-49041 Microsoft Edge (Chromium-based) Spoofing Vulnerability vulnerability
  • CVE-2024-43577 Microsoft Edge (Chromium-based) Spoofing Vulnerability vulnerability
  • CVE-2024-38083 Microsoft Edge (Chromium-based) Spoofing Vulnerability vulnerability
  • CVE-2024-24698 Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. vulnerability
  • CVE-2023-43585 Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a… vulnerability
  • CVE-2023-43588 Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network… vulnerability
  • CVE-2023-39215 Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. vulnerability
  • CVE-2023-36535 Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information… vulnerability
  • CVE-2023-39209 Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information… vulnerability