CWE-412: Unrestricted Externally Accessible Lock
BaseIncomplete
The product properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.
View on MITREBack to CWE Lookup
Extended Description
This prevents the product from acting on associated resources or performing other behaviors that are controlled by the presence of the lock. Relevant locks might include an exclusive lock or mutex, or modifying a shared resource that is treated as a lock. If the lock can be held for an indefinite period of time, then the denial of service could be permanent.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific