CWE-294 (使用捕获-重放进行的认证绕过) — Vulnerability Class 170

CWE-294 represents a critical authentication weakness where attackers bypass security controls by intercepting and retransmitting valid network traffic. This flaw typically arises when systems fail to implement robust session management or cryptographic protections, allowing malicious users to sniff communication channels and capture authentication tokens or credentials. By replaying these captured data packets to the server, attackers can impersonate legitimate users without needing to crack passwords or exploit complex vulnerabilities. To mitigate this risk, developers must employ strong cryptographic measures such as Transport Layer Security (TLS) to encrypt data in transit. Additionally, implementing unique session identifiers, nonces, and strict timestamp validation ensures that each request is distinct and time-bound, effectively neutralizing the threat of replayed packets and maintaining the integrity of the authentication process.