CWE-841Improper Enforcement of Behavioral Workflow

Description

The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.

Common consequences

• Other→Alter Execution Logic,Unexpected State
  By performing actions in an unexpected order, or by omitting steps, an attacker could manipulate the business logic of the product or cause it to enter an invalid state. In some cases, this can also expose resultant weaknesses with security

Related CWEs

Recent CVEs classified under this CWE