CWE-689 — Permission Race Condition During Resource Copy
CWE-689: Permission Race Condition During Resource Copy
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Compound |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.
Common consequences
- Confidentiality, Integrity: Read Application Data, Modify Application Data
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/689.html
- CWE list: https://cwe.mitre.org/data/index.html