2122
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1205 Security Primitives and Cryptography Issues 1194 2473
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Related Attack Patterns
CAPEC-ID Attack Pattern Name
97 Cryptanalysis
CWE-1280: Access Control Check Implemented After Asset is Accessed
Weakness ID : 1280
Structure : Simple
Abstraction : Base
Description
A product's hardware-based access control check occurs after the asset has been accessed.
Extended Description
The product implements a hardware-based access control check. The asset should be accessible
only after the check is successful. If, however, this operation is not atomic and the asset is
accessed before the check is complete, the security of the system may be compromised.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
ChildOf 696 Incorrect Behavior Order 1527
Applicable Platforms
Language : Verilog (Prevalence = Undetermined)
Language : VHDL (Prevalence = Undetermined)
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control
Confidentiality
Integrity
Modify Memory
Read Memory
Modify Application Data
Read Application Data
CWE Version 4.14
CWE-1280: Access Control Check Implemented After Asset is Accessed
CWE-1280: Access Control Check Implemented After Asset is Accessed