CWE-1231
Improper Prevention of Lock Bit Modification
The product uses a trusted lock bit for restricting access to registers, address regions, or other resources, but the product does not prevent the value of the lock bit from being modified after it has been set.
Impactr finds and proves whether CWE-1231 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.