CWE-421—Race Condition During Access to Alternate Channel

名称

Race Condition During Access to Alternate Channel

描述

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

This creates a race condition that allows an attacker to access the channel before the authorized user does.

常见后果

范围：

Access Control

影响：

Gain Privileges or Assume Identity, Bypass Protection Mechanism

相关 CWE

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Medium
• CWE-420Unprotected Alternate Channel