Weakness · CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
Something is checked, then changes before it is used, so the check no longer protects anything.
Official CWE name. Full definition on cwe.mitre.org
In the news
CVEs with this weakness that SecurityTabs has covered, newest first.
How attackers exploit it
Typical ATT&CK techniques for this class of weakness across CISA's Known Exploited Vulnerabilities (CTID mapping).
How it's exploited
What the attacker gets
Controls that stop it
NIST SP 800-53 controls that mitigate the most of those techniques.
- AC-6Least PrivilegeAccess Control · mitigates 2 techniques
- CA-7Continuous MonitoringSecurity Assessment and Authorization · mitigates 2 techniques
- CM-8System Component InventoryConfiguration Management · mitigates 2 techniques
- SC-18Mobile CodeSystem and Communications Protection · mitigates 2 techniques
- SI-3Malicious Code ProtectionSystem and Information Integrity · mitigates 2 techniques
- SI-4System MonitoringSystem and Information Integrity · mitigates 2 techniques
- SI-7Software, Firmware, and Information IntegritySystem and Information Integrity · mitigates 2 techniques
- AC-17Remote AccessAccess Control · mitigates 1 techniques
- AC-2Account ManagementAccess Control · mitigates 1 techniques
- AC-3Access EnforcementAccess Control · mitigates 1 techniques
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.