CWE-655 (不充分的心理学可接受性) — Vulnerability Class 1

1 vulnerabilities classified as CWE-655 (不充分的心理学可接受性). AI Chinese analysis included.

MITRE CWE Description

The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.

Common Consequences (1)

Access Control Bypass Protection Mechanism

By bypassing the security mechanism, a user might leave the system in a less secure state than intended by the administrator, making it more susceptible to compromise.

Mitigations (2)

Testing Where possible, perform human factors and usability studies to identify where your product's security mechanisms are difficult to use, and why.

Architecture and Design Make the security mechanism as seamless as possible, while also providing the user with sufficient details when a security decision produces unexpected results.

Examples (2)

In "Usability of Security: A Case Study" [REF-540], the authors consider human factors in a cryptography product. Some of the weakness relevant discoveries of this case study were: users accidentally leaked sensitive information, could not figure out how to perform some tasks, thought they were enabling a security option when they were not, and made improper trust decisions.

Enforcing complex and difficult-to-remember passwords that need to be frequently changed for access to trivial resources, e.g., to use a black-and-white printer. Complex password requirements can also cause users to store the passwords in an unsafe manner so they don't have to remember them, such as using a sticky note or saving them in an unencrypted file.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-33604	Open-Xchange Dovecot Pro 安全漏洞 — OX Dovecot Pro	5.9	Medium	2026-08-28

Vulnerabilities classified as CWE-655 (不充分的心理学可接受性) represent 1 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.