CWE-694.

Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

• Elastic APM Server
• CWE-694

filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

• CWE-694

>=4.1.0, <4.2.1 · fixed in 4.2.1

Duplicate geometry fields via unvalidated GeoJSON extra members

• MongoDB C# Driver
• CWE-694

Duplicate Identity / Identity Shadowing across CustomerUser backends

• OTRS
• OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition
• CWE-694
• CWE-706

JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen

• jupyterhub
• CWE-694

SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

• sgl-project sglang
• CWE-694

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

• CWE-694

>=3.0.0, <3.6.25 || >=3.7.0, <3.7.10 · fixed in 3.6.25, 3.7.10

Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success

• Linux kernel
• CWE-694

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

• Juniper Networks Junos OS
• CWE-694

Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout

• Ercom Cryptobox
• CWE-694

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing age...

• CWE-694

· no fixed version yet

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

• Broken access control
• CWE-694

<0.1.1 · fixed in 0.1.1

Gallagher Controller 6000 and Controller 7000: Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and…

• Gallagher Controller 6000 and Controller 7000
• CWE-694

PingID integration for Windows login duplicate username collision.

• Ping Identity
• CWE-694

Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability

• Cisco IOS XE Software
• CWE-694

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known

• zephyr
• CWE-694

plugin.yaml file allows for duplicate entries in helm

• Other injection
• CWE-694

>=2.0.0, <2.16.11 · fixed in 2.16.11

Repository index file allows for duplicates of the same chart entry in helm

• Other injection
• CWE-20

<2.16.11 · fixed in 2.16.11