CWE•Class•Draft•5 recent CVEs
CWE-372Incomplete Internal State Distinction
Description
The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.
Common consequences
- Integrity,Other→Varies by Context,Unexpected State