|
|
|
|
CWE-287: Improper Authentication | |
| Weakness ID: 287 (Weakness Class) | | Status: Draft |
 Description
Description Summary When an actor claims to have a given identity, the software
does not prove or insufficiently proves that the claim is
correct.
Alternate Terms
| authentification: | An alternate term is "authentification", which appears to be most
commonly used by people from non-English-speaking countries. |
|---|
Time of Introduction
- Architecture and Design
- Implementation
Common Consequences | Scope | Effect |
|---|
Integrity Access Control | Authentication bypass |
Observed Examples | Reference | Description |
|---|
| CVE-2009-3421 | login script for guestbook allows bypassing
authentication by setting a "login ok" parameter to
1. |
| CVE-2009-2382 | admin script allows authentication bypass by
setting a cookie value to "LOGGEDIN". |
| CVE-2009-1048 | VOIP product allows authentication bypass using
127.0.0.1 in the Host header. |
| CVE-2009-2213 | product uses default "Allow" action, instead of
default deny, leading to authentication
bypass. |
| CVE-2009-2168 | chain: redirect without exit (CWE-698) leads to
resultant authentication bypass. |
| CVE-2009-3107 | product does not restrict access to a listening
port for a critical service, allowing authentication to be
bypassed. |
| CVE-2009-1596 | product does not properly implement a
security-related configuration setting, allowing authentication
bypass. |
| CVE-2009-2422 | authentication routine returns "nil" instead of
"false" in some situations, allowing authentication bypass using an invalid
username. |
| CVE-2009-3232 | authentication update script does not properly
handle when admin does not select any authentication modules, allowing
authentication bypass. |
| CVE-2009-3231 | use of LDAP authentication with anonymous binds
causes empty password to result in successful
authentication |
| CVE-2005-3435 | product authentication succeeds if user-provided
MD5 hash matches the hash in its database; this can be subjected to replay
attacks. |
| CVE-2005-0408 | chain: product generates predictable MD5 hashes
using a constant value combined with username, allowing authentication
bypass. |
Relationships Relationship Notes
|
This can be resultant from SQL injection vulnerabilities and other
issues.
|
Functional Areas Taxonomy Mappings | Mapped Taxonomy Name | Node ID | Fit | Mapped Node Name |
|---|
| PLOVER | | | Authentication Error |
| OWASP Top Ten 2007 | A7 | CWE More Specific | Broken Authentication and Session
Management |
| OWASP Top Ten 2004 | A3 | CWE More Specific | Broken Authentication and Session
Management |
Content History | Submissions |
|---|
| Submission Date | Submitter | Organization | Source |
|---|
| PLOVER | | Externally Mined | | | Modifications |
|---|
| Modification Date | Modifier | Organization | Source |
|---|
| 2008-07-01 | Eric Dalci | Cigital | External | | updated Time of Introduction | | 2008-08-15 | | Veracode | External | | Suggested OWASP Top Ten 2004
mapping | | 2008-09-08 | CWE Content Team | MITRE | Internal | | updated Alternate Terms, Common Consequences,
Relationships, Relationship Notes, Taxonomy Mappings | | 2008-10-14 | CWE Content Team | MITRE | Internal | | updated Relationships | | 2009-01-12 | CWE Content Team | MITRE | Internal | | updated Name | | 2009-05-27 | CWE Content Team | MITRE | Internal | | updated Description,
Related Attack Patterns | | 2009-07-27 | CWE Content Team | MITRE | Internal | | updated Relationships | | 2009-10-29 | CWE Content Team | MITRE | Internal | | updated Common Consequences,
Observed Examples |
|
