CWE-412: Unrestricted Externally Accessible Lock
The product properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.
A kind of CWE-667 Improper Locking.
From the CWE List. © The MITRE Corporation.
Newest
- openvpn OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated... 1.8 Low
- xen sysctl and platform-op locks open to abuse 8.8 High
- mongodb inc server, mongodb, inc. mongodb server +1 more Internal ResourceId collision may affect unrelated collections 7.1 High
- dietpi-dashboard project dietpi-dashboard DietPi-Dashboard Insufficient TLS Handshake Pool 7.5 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 more Denial of service against webconf 7.5 High
- omron plc cj series, plc cs series, plc nx1p2 series +2 more +4 more In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software... 9.8 Critical
- apport project apport, canonical ubuntu linux +1 more apport created lock file in wrong directory 3.3 Low