CWE-365: Race Condition in Switch(廃止)

概要

CWE-365 は CWE フレームワークで廃止された分類です。歴史的な階層や CVE の追跡のためカタログに残されています。

セキュリティへの影響
セキュリティ影響:現行の悪用シナリオでは低い/ない(カタログ上は廃止エントリ)。
補足(歴史的背景)
補足:MITRE は CWE のツリーを随時再編します。脅威モデリングでは現行かつ非廃止の弱点を優先してください。

説明

This entry has been deprecated. There are no documented cases in which a switch's control expression is evaluated more than once.

旧名称

  • Race Condition in Switch (2022-04-28)

コンテンツ投稿

名称
CLASP
日付
2006-07-19
バージョン
Draft 3

コンテンツの変更履歴

日付 名称 バージョン 重要度 コメント
2008-07-01 Eric Dalci 1.0 updated Time_of_Introduction
2008-09-08 CWE Content Team 1.0 updated Applicable_Platforms, Common_Consequences, Relationships, Other_Notes, Taxonomy_Mappings
2008-11-24 CWE Content Team 1.1 updated Relationships, Taxonomy_Mappings
2010-09-27 CWE Content Team 1.10 updated Relationships
2011-06-01 CWE Content Team 1.13 updated Common_Consequences
2011-06-27 CWE Content Team 2.0 updated Common_Consequences
2012-05-11 CWE Content Team 2.2 updated Demonstrative_Examples, References, Relationships
2014-06-23 CWE Content Team 2.7 updated Common_Consequences, Description, Other_Notes, Potential_Mitigations
2014-07-30 CWE Content Team 2.8 updated Relationships, Taxonomy_Mappings
2017-11-08 CWE Content Team 3.0 updated Demonstrative_Examples
2019-01-03 CWE Content Team 3.2 updated Relationships, Taxonomy_Mappings
2020-02-24 CWE Content Team 4.0 updated Description, References, Relationships
2022-04-28 CWE Content Team 4.7 updated Applicable_Platforms, Common_Consequences, Demonstrative_Examples, Description, Likelihood_of_Exploit, Name, Potential_Mitigations, References, Relationships, Taxonomy_Mappings, Time_of_Introduction, Type
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes

貢献

タイプ 名称 日付 コメント
Feedback Yongchool Ryu, MathWorks; Roberto Bagnara, BUGSENG; Guido Persch, Imagix; John Blattner, Imagix; Paul Anderson, GrammaTech; Fulvio Baccaglini; John Viega; Robert Seacord; Members of the CWE-Research mailing list, including Jonathan Hood and Steve Grubb; Commenters on Twitter, including Patricia Aas, Myria, Richard Barrell, and others 2022-03-31 Many members of the CWE community contributed important feedback supporting deprecation of this entry. The contribution date reflects the first public request for comment; much feedback was received both before and after that date.
cvelogic Threat Intelligence