CWE•Base•Incomplete•1 recent CVE
CWE-1249Application-Level Admin Tool with Inconsistent View of Underlying Operating System
Description
The product provides an application for administrators to manage parts of the underlying operating system, but the application does not accurately identify all of the relevant entities or resources that exist in the OS; that is, the application's model of the OS's state is inconsistent with the OS's actual state.
[object Object]
Common consequences
- Access Control→Varies by Context
- Accountability→Hide Activities
- Other→Unexpected State
Potential mitigations
- Architecture and Design[object Object]