CWE-642: External Control of Critical State Data
The product stores security-critical state information about its users, or the product itself, in a location that is accessible to unauthorized actors.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters 8.7 High
- apple ipados, macos, safari +2 more +4 more This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS... 4.3 Medium
- apple ipados, macos, visionos +2 more +4 more An information disclosure issue was addressed with improved state management. This issue is fixed... 4.3 Medium
- apple ipados, macos, visionos +2 more +4 more An information disclosure issue was addressed with improved state management. This issue is fixed... 4.3 Medium
- No product listed Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session 9.1 Critical
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 more Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 7.5 High
- openclaw OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery 5.1 Medium
- keyfactor signserver An error in the SignServer container startup logic was found in Keyfactor SignServer versions... 4.7 Medium
- matrix specification The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution... 7.1 High
- qemu hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue... 4.2 Medium
- gitlab External Control of Critical State Data in GitLab 6.4 Medium
- gallagher controller 6000 and controller 7000 External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000... 6.8 Medium
- mcginty snow Unauthenticated Nonce Increment in snow 3.1 Low
- go standard library runtime, golang go, fedoraproject fedora +2 more Unsafe behavior in setuid/setgid binaries in runtime 7.8 High
- yugabyte yugabytedb Remote Code Execution 7.2 High
- apple ios, iphone os +1 more A logic issue was addressed with improved state management. This issue is fixed in iOS 16.... 5.3 Medium
- juniper junos, juniper networks junos os +1 more Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS 6.8 Medium
- netgear r7450, ac2100 firmware, ac2400 firmware +17 more +19 more This vulnerability allows network-adjacent attackers to bypass authentication on affected... 8.8 High
- dell cpg bios, inspiron 5675 firmware +1 more Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite... 6.8 Medium
- palo alto networks globalprotect GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability. 4.7 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +2 more +4 more An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps 7.5 High
- cisco hyperflex hx-series, hyperflex hx data platform +1 more Cisco HyperFlex Software Static Signing Key Vulnerability 8.6 High
- hackerone html-janitor node module, theguardian html-janitor +1 more Bypassing Sanitization using DOM clobbering in html-janitor 6.1 Medium