BaseDraft
CWE-421Race Condition During Access to Alternate Channel
Category: logic
Description
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
This creates a race condition that allows an attacker to access the channel before the authorized user does.
Common consequences· 1
- Access Control — Gain Privileges or Assume Identity, Bypass Protection Mechanism
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.