Back to CWE list
CWE-820
Missing Synchronization
Base
Incomplete
Description
The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.
If access to a shared resource is not synchronized, then the resource may not be in a state that is expected by the product. This might lead to unexpected or insecure behaviors, especially if an attacker can influence the shared resource.
Parent Weaknesses (ChildOf)
Common Consequences
Scope
Integrity
Confidentiality
Other
Impact
Modify Application Data, Read Application Data, Alter Execution Logic
Applicable Platforms
Not Language-Specific
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now