Use of Multiple Resources with Duplicate Identifier
CWE-694
The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.
We track 5 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
How this weakness is prevented
- Architecture and Design: Where possible, use unique identifiers. If non-unique identifiers are detected, then do not operate any resource with a non-unique identifier and report the error appropriately.
Latest Use of Multiple Resources with Duplicate Identifier vulnerabilities
- 7.5 High severity
sglang: Use of Multiple Resources with Duplicate Identifier
SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values t
- 8.1 High severity
traefik: Use of Multiple Resources with Duplicate Identifier
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRout
- 8.8 High severity
Linux: Use of Multiple Resources with Duplicate Identifier
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_rsp() returns early on success without clearing chan->ident. Every other L2CAP response handler (l2cap_e
- 8.2 High severity
keylime: Use of Multiple Resources with Duplicate Identifier
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legit
- 8.1 High severity
openbao-plugins: Use of Multiple Resources with Duplicate Identifier
OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account