CWE-820 — Missing Synchronization
CWE-820: Missing Synchronization
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.
If access to a shared resource is not synchronized, then the resource may not be in a state that is expected by the product. This might lead to unexpected or insecure behaviors, especially if an attacker can influence the shared resource.
Common consequences
- Integrity, Confidentiality, Other: Modify Application Data, Read Application Data, Alter Execution Logic
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/820.html
- CWE list: https://cwe.mitre.org/data/index.html