CWE-597— Use of Wrong Operator in String Comparison

The product uses the wrong operator when comparing a string, such as using "==" when the .equals() method should be used instead.— MITRE CWE catalog

3 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-597page 1 of 1

CVE-2021-3797CRITICALCVSS 9.8EG 9.8
2021-09-15
hestiacp is vulnerable to Use of Wrong Operator in String Comparison
CVE-2021-4259MEDIUMCVSS 5.0EG 9.8
2022-12-19
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong op…
CVE-2022-36072MEDIUMCVSS 5.9EG 5.9
2022-09-06
SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP, hashes generated by built-in functions and starting with the `0e` symbols were being handled as ze…

Map vulnerabilities like CWE-597 to your infrastructure

EchelonGraph correlates every CVE — across CWE-597 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →