目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-640 忘记口令恢复机制弱 类漏洞列表 143

CWE-640 忘记口令恢复机制弱 类弱点 143 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-640属于身份验证绕过类漏洞，指应用程序在用户忘记密码时提供的恢复机制存在安全缺陷。攻击者通常利用该弱点，通过猜测简单安全问题、拦截重置链接或暴力破解临时令牌，从而非法重置密码并接管账户。开发者应避免使用可预测的恢复凭据，采用多因素认证、发送一次性动态验证码至受控邮箱或手机，并实施速率限制以增强恢复流程的安全性。

MITRE CWE 官方描述
CWE：CWE-640 遗忘密码的弱密码恢复机制 英文：产品包含一种允许用户在不知道原始密码的情况下恢复或更改密码的机制，但该机制存在弱点。 应用程序通常具备一种机制，以便在用户忘记密码时提供访问其账户的途径。然而，密码恢复机制往往存在弱点，这使得除合法系统用户之外的其他人更有可能获得该用户账户的访问权限。弱密码恢复方案会完全破坏强密码认证方案的有效性。这种弱点可能表现为安全提示问题过于简单，容易被猜测或找到答案（例如，因为问题过于常见，或者答案可以通过社交媒体获取）。或者，密码恢复机制的代码可能存在实现弱点，例如欺骗系统将新密码发送到用户之外的其他电子邮件账户。密码重置的频率可能缺乏速率限制（throttling），导致攻击者通过快速连续尝试恢复密码，从而对合法用户造成服务拒绝（denial of service）。系统可能会向用户发送原始密码，而不是生成新的临时密码。总之，密码恢复功能如果未经过仔细设计和实现，往往会成为系统中最薄弱的环节，可能被滥用，从而使攻击者能够未经授权地访问系统。
常见影响 (3)
Access Control Gain Privileges or Assume Identity
An attacker could gain unauthorized access to the system by retrieving legitimate user's authentication credentials.
Availability DoS: Resource Consumption (Other)
An attacker could deny service to legitimate system users by launching a brute force attack on the password recovery mechanism using user ids of legitimate users.
Integrity, Other Other
The system's security functionality is turned against the system by the attacker.
缓解措施 (5)
Architecture and Design Make sure that all input supplied by the user to the password recovery mechanism is thoroughly filtered and validated.
Architecture and Design Do not use standard weak security questions and use several security questions.
Architecture and Design Make sure that there is throttling on the number of incorrect answers to a security question. Disable the password recovery functionality after a certain (small) number of incorrect guesses.
Architecture and Design Require that the user properly answers the security question prior to resetting their password and sending the new password to the e-mail address of record.
Architecture and Design Never allow the user to control what e-mail address the new password will be sent to in the password recovery mechanism.
代码示例 (1)
A famous example of this type of weakness being exploited is the eBay attack. eBay always displays the user id of the highest bidder. In the final minutes of the auction, one of the bidders could try to log in as the highest bidder three times. After three incorrect log in attempts, eBay password throttling would kick in and lock out the highest bidder's account for some time. An attacker could th…
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-4448 OpenRapid RapidCMS 授权问题漏洞 — RapidCMS 6.3 Medium 2023-08-21
CVE-2023-35134 Weintek Weincloud 授权问题漏洞 — Weincloud 7.4 High 2023-07-19
CVE-2023-3007 Student Management System 授权问题漏洞 — Student Management System 6.5 Medium 2023-05-31
CVE-2023-30466 Milesight 4K/H.265 Series 授权问题漏洞 — NVR MS-Nxxxx-xxG 9.8 Critical 2023-04-28
CVE-2022-26872 AMI MegaRAC 授权问题漏洞 — MegaRAC SPx-12 8.3 High 2023-01-30
CVE-2015-10071 eZ Publish Modern Legacy 授权问题漏洞 — ezpublish-modern-legacy 2.6 Low 2023-01-19
CVE-2022-3485 IFM Moneo Appliance 授权问题漏洞 — moneo appliance 9.8 Critical 2022-12-12
CVE-2022-37300 多款Schneider Electric产品授权问题漏洞 — EcoStruxure Control Expert 9.8 Critical 2022-09-12
CVE-2022-29174 countly-server 授权问题漏洞 — countly-server 8.1 High 2022-05-17
CVE-2022-24892 Shopware 授权问题漏洞 — shopware 6.4 Medium 2022-04-28
CVE-2022-1073 ResearchGate Automatic Question Paper Generator System授权问题漏洞 — Automatic Question Paper Generator 7.3 High 2022-03-29
CVE-2022-0777 Microweber 授权问题漏洞 — microweber/microweber 7.5 - 2022-03-01
CVE-2021-27654 Pegasystems Pega 授权问题漏洞 — Pega Infinity 7.8 - 2022-01-28
CVE-2022-22691 Umbraco 环境问题漏洞 — Umbraco CMS 6.8 Medium 2022-01-18
CVE-2021-25961 SuiteCRM 授权问题漏洞 — SuiteCRM 8.0 High 2021-09-29
CVE-2021-25957 Dolibarr 授权问题漏洞 — dolibarr 8.8 High 2021-08-17
CVE-2021-37693 Discourse 代码问题漏洞 — discourse 5.3 Medium 2021-08-13
CVE-2021-36804 Akaunting 授权问题漏洞 — Akaunting 5.4 Medium 2021-08-04
CVE-2021-22763 Schneider-electric PowerLogic 多款产品授权问题漏洞 — PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) 9.8 - 2021-06-11
CVE-2021-22731 Schneider Electric 授权问题漏洞 — Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior 9.8 - 2021-05-26
CVE-2020-5361 Dell Client Commercial and Consumer 授权问题漏洞 — CPG BIOS 5.1 Medium 2021-01-04
CVE-2019-6560 Auto-Maskin 授权问题漏洞 — Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App) 9.1 - 2020-03-23
CVE-2018-16529 Forcepoint Email Security 授权问题漏洞 — Forcepoint Email Security 9.8 - 2019-03-28

CWE-640（忘记口令恢复机制弱） 是常见的弱点类别，本平台收录该类弱点关联的 143 条 CVE 漏洞。