CWE-1290
Incorrect Decoding of Security Identifiers
The product implements a decoding mechanism to decode certain bus-transaction signals to security identifiers. If the decoding is implemented incorrectly, then untrusted agents can now gain unauthorized access to the asset.
Impactr finds and proves whether CWE-1290 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.