943
Scope Impact Likelihood
The attacker can gain access to otherwise unauthorized
resources.
Integrity
Confidentiality
Other
Modify Application Data
Modify Files or Directories
Read Application Data
Read Files or Directories
Other
Race conditions such as this kind may be employed
to gain read or write access to resources not normally
readable or writable by the user in question.
Integrity
Other
Modify Application Data
Other
The resource in question, or other resources (through the
corrupted one) may be changed in undesirable ways by a
malicious user.
Non-Repudiation Hide Activities
If a file or other resource is written in this method, as
opposed to a valid way, logging of the activity may not
occur.
Non-Repudiation
Integrity
Modify Files or Directories
In some cases it may be possible to delete files that a
malicious user might not otherwise have access to -- such
as log files.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 980 SFP Secondary Cluster: Link in Resource Name
Resolution
888 2409
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Symbolic name not mapping to correct
object
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-390: Detection of Error Condition Without Action
Weakness ID : 390
Structure : Simple
Abstraction : Base
Description
The product detects a specific error, but takes no actions to handle the error.
CWE Version 4.14
CWE-390: Detection of Error Condition Without Action
CWE-390: Detection of Error Condition Without Action