CWE-1280
Access Control Check Implemented After Asset is Accessed
A product's hardware-based access control check occurs after the asset has been accessed.
Impactr finds and proves whether CWE-1280 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.