CWE 1280 and CWE 1264

CWE-1280 and CWE-1264 working notes

Entry Name, Description and Examples

• CWE-1280: Access Control Check Implemented After Asset is Accessed

• Description: https://cwe.mitre.org/data/definitions/1280.html#Description

• Examples: https://cwe.mitre.org/data/definitions/1280.html#Description

• CWE-1264: Hardware Logic with Insecure De-Synchronization between Control and Data Channels

• Description: https://cwe.mitre.org/data/definitions/1264.html#Description

• Examples: https://cwe.mitre.org/data/definitions/1264.html#Demonstrative_Examples

SIG points to consider

1. Do you disagree that the two entries are not duplicates?
2. What improvements need to be made to the description in order to make the differences clear?
3. What improvements need to be made to the examples in order to make the differences clear?