Skip to content
OpenAdvisories

Weakness (CWE)

CWE-372: Incomplete Internal State Distinction

Class Draft Mapping discouraged

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

Source: MITRE CWE-372

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-22590

    The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow…

  • Critical 9.1
    CVE-2023-31127

    DMTF-2023-0001: SPDM mutual authentication bypass

    libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication…

    DMTF libspdm