CWE-1249
Application-Level Admin Tool with Inconsistent View of Underlying Operating System
The product provides an application for administrators to manage parts of the underlying operating system, but the application does not accurately identify all of the relevant entities or resources that exist in the OS; that is, the application's model of the OS's state is inconsistent with the OS's actual state.
Impactr finds and proves whether CWE-1249 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.