2055
• After the values in the original copy change, the original copy sends the "update" request to
its shadow copies, and the shadow copy executes this update request faithfully. However,
during the small time period when the original copy has "new" values and the shadow copy is
still holding the "old" values, an attacker can exploit the old values. Then it becomes a race
condition between the attacker and the update process of who can reach the target, shadow
copy first, and, if the attacker reaches first, the attacker wins.
• The attacker might send a "spoofed" update request to the target shadow copy, pretending
that this update request is coming from the original copy. This spoofed request might cause
the targeted shadow copy to update its values to some attacker-friendly values, while the
original copies remain unchanged by the attacker.
• Suppose a situation where the original copy has a system of reverting back to its original
value if it does not hear back from all the shadow copies that such copies have successfully
completed the update request. In such a case, an attack might occur as follows: (1) the
original copy might send an update request; (2) the shadow copy updates it; (3) the shadow
copy sends back the successful completion message; (4) through a separate issue, the
attacker is able to intercept the shadow copy's completion message. In this case, the original
copy thinks that the update did not succeed, hence it reverts to its original value. Now there
is a situation where the original copy has the "old" value, and the shadow copy has the "new"
value.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1250 Improper Preservation of Consistency Between Independent
Representations of Shared State