Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CAPEC-140:Bypassing of Intermediate Forms in Multiple-Form Sets
Attack Pattern ID:140
Version:v3.9
Attack Pattern Name:Bypassing of Intermediate Forms in Multiple-Form Sets
Abstraction:Standard
Status:Draft
Likelihood of Attack:
Typical Severity:Medium
DetailsContent HistoryRelated WeaknessesReports
1Weaknesses found
CWE-372
Incomplete Internal State Distinction
ShareView Details
Incomplete Internal State Distinction
Likelihood of Exploit-Not Available
Mapping-Discouraged
Abstraction-Base
Found in6CVEs

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

Impacts-
Unexpected StateVaries by Context
Tags-
Unexpected State (impact)Varies by Context (impact)
As Seen In-
Not Available