1720
Nature Type ID Name Page
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1365 ICS Communications: Unreliability 1358 2502
MemberOf 1373 ICS Engineering (Construction/Deployment): Trust
Model Problems
1358 2510
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
The CERT Oracle Secure
Coding Standard for Java
(2011)
SEC09-J Do not base security checks on
untrusted sources
References
[REF-754]Frank Kim. "Top 25 Series - Rank 6 - Reliance on Untrusted Inputs in a Security
Decision". 2010 March 5. SANS Software Security Institute. < https://www.sans.org/blog/top-25-
series-rank-6-reliance-on-untrusted-inputs-in-a-security-decision/ >.2023-04-07.
[REF-529]"HMAC". 2011 August 8. Wikipedia. < https://en.wikipedia.org/wiki/HMAC >.2023-04-07.
[REF-756]Scott Mitchell. "Understanding ASP.NET View State". 2004 May 5. Microsoft. <
https://learn.microsoft.com/en-us/previous-versions/dotnet/articles/ms972976(v=msdn.10)?
redirectedfrom=MSDN >.2023-04-07.
[REF-45]OWASP. "OWASP Enterprise Security API (ESAPI) Project". < http://www.owasp.org/
index.php/ESAPI >.
CWE-820: Missing Synchronization
Weakness ID : 820
Structure : Simple
Abstraction : Base
Description
The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize
access to the resource.
Extended Description
If access to a shared resource is not synchronized, then the resource may not be in a state that
is expected by the product. This might lead to unexpected or insecure behaviors, especially if an
attacker can influence the shared resource.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 662 Improper Synchronization 1448
ParentOf 543 Use of Singleton Pattern Without Synchronization in a
Multithreaded Context