Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CWE-287 (认证机制不恰当) — Vulnerability Class 1455

1455 vulnerabilities classified as CWE-287 (认证机制不恰当). AI Chinese analysis included.

CWE-287 represents a critical authentication weakness where a system fails to adequately verify the identity of an actor claiming a specific identity. This flaw typically allows attackers to bypass security controls by exploiting insufficient verification mechanisms, enabling unauthorized access through stolen credentials, brute-force attacks, or session hijacking. When authentication logic is flawed, malicious entities can impersonate legitimate users, leading to severe data breaches and privilege escalation. Developers mitigate this risk by implementing robust, multi-factor authentication protocols and ensuring that identity verification processes are rigorous and resistant to common attack vectors. By strictly validating credentials against secure, hashed databases and employing adaptive security measures, organizations can significantly reduce the likelihood of unauthorized access, thereby protecting sensitive information and maintaining system integrity against sophisticated cyber threats.

MITRE CWE Description
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Common Consequences (1)
Integrity, Confidentiality, Availability, Access ControlRead Application Data, Gain Privileges or Assume Identity, Execute Unauthorized Code or Commands
This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.
Mitigations (1)
Architecture and DesignUse an authentication framework or library such as the OWASP ESAPI Authentication feature.
Examples (2)
The following code intends to ensure that the user is already logged in. If not, the code performs authentication with the user-provided username and password. If successful, it sets the loggedin and user cookies to "remember" that the user has already logged in. Finally, the code performs administrator tasks if the logged-in user has the "Administrator" username, as recorded in the user cookie.
my $q = new CGI; if ($q->cookie('loggedin') ne "true") { if (! AuthenticateUser($q->param('username'), $q->param('password'))) { ExitError("Error: you need to log in first"); } else { # Set loggedin and user cookies. $q->cookie( -name => 'loggedin', -value => 'true' ); $q->cookie( -name => 'user', -value => $q->param('username') ); } } if ($q->cookie('user') eq "Administrator") { DoAdministratorTasks(); }
Bad · Perl
GET /cgi-bin/vulnerable.cgi HTTP/1.1 Cookie: user=Administrator Cookie: loggedin=true [body of request]
Attack
In January 2009, an attacker was able to gain administrator access to a Twitter server because the server did not restrict the number of login attempts [REF-236]. The attacker targeted a member of Twitter's support team and was able to successfully guess the member's password using a brute force attack by guessing a large number of common words. After gaining access as the member of the support st…
CVE IDTitleCVSSSeverityPublished
CVE-2022-23769 Secuever reverseWall-MDS Remote Code Execution Vulnerability — reverseWall-MDS 7.5 High2022-10-17
CVE-2022-42463 Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ... — OpenHarmony 8.3 High2022-10-14
CVE-2022-42488 Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services. — OpenHarmony 8.4 High2022-10-14
CVE-2022-39229 Grafana users with email as a username can block other users from signing in — grafana 4.3 Medium2022-10-13
CVE-2022-3465 Mediabridge Medialink index.asp improper authentication — Medialink 7.3 High2022-10-12
CVE-2022-40664 Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher — Apache Shiro 9.8 -2022-10-12
CVE-2022-39290 CSRF key bypass using HTTP methods in zoneminder — zoneminder 8.0 High2022-10-07
CVE-2022-20662 Cisco Duo for macOS Authentication Bypass Vulnerability — Cisco Duo 6.1 Medium2022-09-30
CVE-2022-39263 NextAuth.js Upstash Adapter missing token verification — next-auth 6.8 Medium2022-09-28
CVE-2022-22523 Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass — UWP 3.0 Monitoring Gateway and Controller 7.5 High2022-09-28
CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit — Bifrost 8.5 High2022-09-26
CVE-2022-3119 OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass — OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) 9.1 -2022-09-26
CVE-2022-30124 Rocket.Chat 授权问题漏洞 — Rocket.Chat Mobile app 6.8 -2022-09-23
CVE-2022-35248 Rocket.Chat 授权问题漏洞 — Rocket.Chat 8.8 -2022-09-23
CVE-2021-45035 Velneo vClient Improper authentication — Velneo vClient 6.3 Medium2022-09-23
CVE-2022-39238 Improper Authentication in Arvados when using PAM as identity provider — arvados 4.2 Medium2022-09-23
CVE-2022-39231 Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented — parse-server 3.7 Low2022-09-23
CVE-2022-3173 Improper Authentication in snipe/snipe-it — snipe/snipe-it 7.1 -2022-09-17
CVE-2022-39205 Access Control Bypass in Onedev — onedev 9.0 Critical2022-09-13
CVE-2022-36106 Missing check for expiration time of password reset token in TYPO3 — typo3 5.4 Medium2022-09-13
CVE-2022-39801 Contributor License Agreement assistant 授权问题漏洞 — SAP GRC Access Control Emergency Access Management 8.8 -2022-09-13
CVE-2022-36092 XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action — xwiki-platform 7.5 High2022-09-08
CVE-2022-36073 RubyGems allows creation of users with arbitrary unverified emails — rubygems.org 8.3 High2022-09-07
CVE-2022-26858 Dell BIOS 授权问题漏洞 — CPG BIOS 6.1 Medium2022-09-06
CVE-2022-31020 Remote code execution in Indy's NODE_UPGRADE transaction — indy-node 8.8 High2022-09-06
CVE-2022-36071 Recovery codes abuse in SFTPGo — sftpgo 8.3 High2022-09-02
CVE-2022-34380 Dell CloudLink 授权问题漏洞 — CloudLink 9.3 Critical2022-09-01
CVE-2022-34379 Dell EMC CloudLink 授权问题漏洞 — CloudLink 9.4 Critical2022-09-01
CVE-2021-3632 Red Hat Single Sign-On 授权问题漏洞 — keycloak 8.1 -2022-08-26
CVE-2021-3827 Red Hat Keycloak 授权问题漏洞 — keycloak 6.8 -2022-08-23

Vulnerabilities classified as CWE-287 (认证机制不恰当) represent 1455 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.