CWE-841Improper Enforcement of Behavioral Workflow

Description

The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

[object Object]

Common consequences

• Other→Alter Execution Logic
  An attacker could cause the product to skip critical steps or perform them in the wrong order, bypassing its intended business logic. This can sometimes have security implications.

Related CWEs

Recent CVEs classified under this CWE