Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
AttackPattern · CAPEC-29
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "CAPEC-29",
"title": "Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",
"type": "AttackPattern",
"source_url": "https://capec.mitre.org/data/definitions/29.html",
"snapshot": "capec.xml",
"status": "Draft",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"abstraction": "Standard",
"source_version": "3.9"
}Explicit source assertions (9)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
CAPEC-29 → related_weakness → CWE-367
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-368
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-366
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-370
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-362
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-662
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-691
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-663
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses
CAPEC-29 → related_weakness → CWE-665
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='29']/Related_Weaknesses