| 名称 |
Authentication Abuse |
|
| 攻击可能性 |
典型严重性 |
| Medium |
Medium |
|
| 摘要 |
An attacker obtains unauthorized access to an application, service or device either through knowledge of the inherent weaknesses of an authentication mechanism, or by exploiting a flaw in the authentication scheme's implementation. In such an attack an authentication mechanism is functioning but a carefully controlled sequence of events causes the mechanism to grant access to the attacker. |
| 前置条件 |
An authentication mechanism or subsystem implementing some form of authentication such as passwords, digest authentication, security certificates, etc. which is flawed in some way. |
| 解决方案 | |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-287 |
Improper Authentication |
| CWE-1244 |
Internal Asset Exposed to Unsafe Debug Access Level or State |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1548 |
Abuse Elevation Control Mechanism |
|