CWE-1302
Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)
The product implements a security identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. A transaction is sent without a security identifier.
Impactr finds and proves whether CWE-1302 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.
