CWE-372: Incomplete Internal State Distinction

Base Draft Simple

CWE版本: 4.18

更新日期: 2025-09-09

弱点描述

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

常见后果

影响范围: Integrity Other

技术影响: Varies by Context Unexpected State

引入模式

阶段 说明
Implementation -

适用平台

编程语言
Not Language-Specific (Undetermined)

分类映射

分类名称 条目ID 条目名称 映射适配度
PLOVER - Incomplete Internal State Distinction -
关键信息

CWE ID: CWE-372

抽象级别: Base

结构: Simple

状态: Draft

相关弱点
相关攻击模式
CAPEC-140 CAPEC-74