Insufficient UI Warning of Dangerous Operations

Draft Base
Structure: Simple
Description

The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.

Common Consequences 1
Scope: Non-Repudiation

Impact: Hide Activities

Observed Examples 1
CVE-2007-1099User not sufficiently warned if host key mismatch occurs
Applicable Platforms
Languages:
Not Language-Specific : Undetermined
Modes of Introduction
Architecture and Design
Implementation
Related Weaknesses
Taxonomy Mapping
  • PLOVER