CWE-689

Permission Race Condition During Resource Copy
AI Translation Available

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

Status
draft
Abstraction
compound
C Perl

Common Consequences

confidentiality integrity
Impacts
read application data modify application data

Potential Mitigations