CWE-694

Use of Multiple Resources with Duplicate Identifier
AI Translation Available

The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

Status
incomplete
Abstraction
base

If the product assumes that each resource has a unique identifier, the product could operate on the wrong resource if attackers can cause multiple resources to be associated with the same identifier.

Common Consequences

access control other
Impacts
bypass protection mechanism quality degradation

Potential Mitigations

Phases:
architecture and design
Descriptions:
• Where possible, use unique identifiers. If non-unique identifiers are detected, then do not operate any resource with a non-unique identifier and report the error appropriately.