COMMON WEAKNESS ENUMERATIONIncomplete

CWE-694

Use of Multiple Resources with Duplicate Identifier

The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

Extended description

If the product assumes that each resource has a unique identifier, the product could operate on the wrong resource if attackers can cause multiple resources to be associated with the same identifier.

Root cause

How and when does the problem arise?

Lifecycle phase

Architecture and Design

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Bypass Protection Mechanism

Affected security scopes: Access Control

If unique identifiers are assumed when protecting sensitive resources, then duplicate identifiers might allow attackers to bypass the protection.
Quality Degradation

Affected security scopes: Other

Defence

How is it prevented and fixed?

Architecture and Design

Architecture and design approach

Detail
Where possible, use unique identifiers. If non-unique identifiers are detected, then do not operate any resource with a non-unique identifier and report the error appropriately.