CWE-446
UI Discrepancy for Security Feature
The user interface does not correctly enable or configure a security feature, but the interface provides feedback that causes the user to believe that the feature is in a secure state.
Impactr finds and proves whether CWE-446 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.