Common Weakness Enumeration

CWE-372 Incomplete Internal State Distinction

Description

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-372 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-86h5-xcpx-cfqc - LOW

ASA-2024-005: Potential slashing evasion during re-delegation

2024-11-04
GHSA-g42g-737j-qx6j CVE-2021-25735 MODERATE

Access Restriction Bypass in kube-apiserver

2022-03-22