CWE•Base•Incomplete•2 recent CVEs
CWE-1007Insufficient Visual Distinction of Homoglyphs Presented to User
Description
The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.
[object Object]
Common consequences
- Integrity,Confidentiality→OtherAn attacker may ultimately redirect a user to a malicious website, by deceiving the user into believing the URL they are accessing is a trusted domain. However, the attack can also be used to forge log entries by using homoglyphs in usernam
Potential mitigations
- Implementation[object Object]
- Implementation[object Object]