| 名称 |
Authentication Bypass |
|
| 攻击可能性 |
典型严重性 |
| Medium |
Medium |
|
| 摘要 |
An attacker gains access to application, service, or device with the privileges of an authorized or privileged user by evading or circumventing an authentication mechanism. The attacker is therefore able to access protected data without authentication ever having taken place. |
| 前置条件 |
An authentication mechanism or subsystem implementing some form of authentication such as passwords, digest authentication, security certificates, etc. |
| 解决方案 | |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-287 |
Improper Authentication |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1548 |
Abuse Elevation Control Mechanism |
|