CWE-820—Missing Synchronization

名称

Missing Synchronization

描述

The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.

If access to a shared resource is not synchronized, then the resource may not be in a state that is expected by the product. This might lead to unexpected or insecure behaviors, especially if an attacker can influence the shared resource.

常见后果

范围：

Integrity, Confidentiality, Other

影响：

Modify Application Data, Read Application Data, Alter Execution Logic

相关 CWE

• CWE-662Improper Synchronization