CWE-689—Permission Race Condition During Resource Copy

名称

Permission Race Condition During Resource Copy

描述

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

常见后果

范围：

Confidentiality, Integrity

影响：

Read Application Data, Modify Application Data

相关 CWE

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Medium
• CWE-732Incorrect Permission Assignment for Critical ResourceHigh