CWE-694: Use of Multiple Resources with Duplicate Identifier
The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.
A kind of CWE-99 Improper Control of Resource Identifiers.
From the CWE List. © The MITRE Corporation.
Newest
- elastic apm server Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure 4.3 Medium
- mongodb c# driver Duplicate geometry fields via unvalidated GeoJSON extra members 5.3 Medium
- tox-dev filelock filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse 4.7 Medium
- otrs ag ((otrs)) community edition, otrs +1 more Duplicate Identity / Identity Shadowing across CustomerUser backends 5.4 Medium
- jupyterhub JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen 2.3 Low
- sgl-project sglang SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room 8.7 High
- traefik Traefik: Gateway API route identity collision allows cross-namespace backend hijacking 7.6 High
- linux Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success 8.8 High
- juniper junos, juniper networks junos os +1 more Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously 6.9 Medium
- ercom cryptobox Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout 4.9 Medium
- keylime project keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 more Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 8.2 High
- openbao aws plugin, openbao-plugins +1 more OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method 8.1 High
- gallagher controller 6000 and controller 7000 Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and... 4.6 Medium
- pingidentity pingid integration for windows login, ping identity unspecified +1 more PingID integration for Windows login duplicate username collision. 3.8 Low
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability 6.8 Medium
- zephyrproject zephyr BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known 4.3 Medium
- helm Duplicate plugin entries in Helm 3.0 Low
- helm Duplicated chart entries in Helm 2.2 Low