CWE-1280: Access Control Check Implemented After Asset is Accessed
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
A product's hardware-based access control check occurs after the asset has been accessed.
常见后果
影响范围: Access Control Confidentiality Integrity
技术影响: Modify Memory Read Memory Modify Application Data Read Application Data Gain Privileges or Assume Identity Bypass Protection Mechanism
潜在缓解措施
阶段: Implementation
描述: Implement the access control check first. Access should only be given to asset if agent is authorized.
引入模式
| 阶段 | 说明 |
|---|---|
| Implementation | - |