CWE-372—Incomplete Internal State Distinction

名称

Incomplete Internal State Distinction

描述

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

常见后果

范围：

Integrity, Other

影响：

Varies by Context, Unexpected State

相关 CWE

• CWE-664Improper Control of a Resource Through its Lifetime