Missing Lock Check

Opis

A product does not check to see if a lock is present before performing sensitive operations on a resource.

Skutki

• Integrity, Availability

  Modify Application Data; DoS: Instability; DoS: Crash, Exit, or Restart

Zapobieganie

• Architecture and Design, Implementation

  Implement a reliable lock mechanism.

Przykłady podatności

• CVE-2004-1056 Product does not properly check if a lock is present, allowing other attackers to access functionality.

Słabość nadrzędna

• CWE-667 Improper Locking

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific