CWE-1302 Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)

base

The product implements a security identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. A transaction is sent without a security identifier.

01

parent weaknesses

Broader classes this is a kind of.

02

attack patterns (2)

CAPEC attack patterns that exploit this.

03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan