CWE-413

Improper Resource Locking

Medium

Description

The product does not lock or does not correctly lock a resource when the product must have exclusive access to the resource.

Potential Impact

Integrity: Modify Application Data

How to Fix

Architecture and Design

Use a non-conflicting privilege scheme.

Architecture and Design

Use synchronization when locking a resource.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-413 vulnerabilities in your codebase.

Get Security Assessment