目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-807 在安全决策中依赖未经信任的输入 类漏洞列表 68

CWE-807 在安全决策中依赖未经信任的输入 类弱点 68 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-807 属于依赖不可信输入进行安全决策的漏洞。攻击者通过篡改 Cookie、环境变量或隐藏表单字段等输入，绕过产品依赖这些值建立的保护机制。开发者需摒弃对客户端数据的盲目信任，不应假设此类输入不可修改。在关键安全逻辑中，必须对输入进行严格验证、完整性校验及服务端重新计算，确保决策依据不被恶意操纵，从而防止安全控制失效。

MITRE CWE 官方描述
CWE：CWE-807 在安全决策中依赖不可信输入 英文：产品使用了一种保护机制，该机制依赖于某个输入的存在性或值，但该输入可以被不可信的行为者以绕过该保护机制的方式进行修改。 开发人员可能假设诸如 cookies、环境变量和隐藏表单字段等输入无法被修改。然而，攻击者可以使用定制的客户端或其他攻击手段来更改这些输入。这种更改可能不会被检测到。当基于这些输入的值进行身份验证（authentication）和授权（authorization）等安全决策时，攻击者可以绕过软件的安全性。如果没有足够的加密（encryption）、完整性检查（integrity checking）或其他机制，任何源自外部的输入都不可信。
常见影响 (1)
Confidentiality, Access Control, Availability, Other Bypass Protection Mechanism, Gain Privileges or Assume Identity, Varies by Context
Attackers can bypass the security decision to access whatever is being protected. The consequences will depend on the associated functionality, but they can range from granting additional privileges to untrusted users to bypassing important security checks. Ultimately, this weakness may lead to expo…
缓解措施 (5)
Architecture and Design Store state information and sensitive data on the server side only. Ensure that the system definitively and unambiguously keeps track of its own state and user state and has rules defined for legitimate state transitions. Do not allow any application user to affect state directly in any way other than through legitimate actions leading to state transitions. If information must be stored on the cli…
Architecture and Design Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. With a stateless protocol such as HTTP, use a framework that maintains the state for you. Examples include ASP.NET View State [REF-756] and the OWASP ESAPI Session Management feature [REF-45]. Be careful of language features that provide state support, since …
Architecture and Design For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks entirely. Then, these modified values would be submitted to the server.
Operation, Implementation When using PHP, configure the application so that it does not use register_globals. During implementation, develop the application so that it does not rely on this feature, but be wary of implementing a register_globals emulation that is subject to weaknesses such as CWE-95, CWE-621, and similar issues.
Architecture and Design, Implementation Understand all the potential areas where untrusted inputs can enter your software: parameters or arguments, cookies, anything read from the network, environment variables, reverse DNS lookups, query results, request headers, URL components, e-mail, files, filenames, databases, and any external systems that provide data to the application. Remember that such inputs may be obtained indirectly throug…
代码示例 (2)
The following code excerpt reads a value from a browser cookie to determine the role of the user.
Cookie[] cookies = request.getCookies(); for (int i =0; i< cookies.length; i++) { Cookie c = cookies[i]; if (c.getName().equals("role")) { userRole = c.getValue(); } }
Bad · Java
The following code could be for a medical records application. It performs authentication by checking if a cookie has been set.
$auth = $_COOKIES['authenticated']; if (! $auth) { if (AuthenticateUser($_POST['user'], $_POST['password']) == "success") { // save the cookie to send out in future responses setcookie("authenticated", "1", time()+60*60*2); } else { ShowLoginScreen(); die("\n"); } } DisplayMedicalHistory($_POST['patient_ID']);
Bad · PHP
CVE ID 标题 CVSS 风险等级 Published
CVE-2022-24400 TETRA BURST 安全漏洞 — TETRA Standard 7.5 High 2023-10-19
CVE-2023-0009 Palo Alto Networks GlobalProtect 安全漏洞 — GlobalProtect App 7.8 High 2023-06-14
CVE-2022-20744 Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center 6.5 - 2022-05-03
CVE-2021-36777 SUSE openSUSE 安全漏洞 — Build service 8.1 High 2022-03-09
CVE-2021-31999 Rancher Labs Rancher 安全漏洞 — Rancher 8.8 High 2021-07-15
CVE-2021-29479 Ratpack 安全漏洞 — ratpack 7.0 High 2021-06-29
CVE-2020-5252 Safety 安全漏洞 — safety 5.0 Medium 2020-03-23
CVE-2017-0887 Nextcloud Server 安全漏洞 — Nextcloud Server 2.7 - 2017-04-05

CWE-807（在安全决策中依赖未经信任的输入） 是常见的弱点类别，本平台收录该类弱点关联的 68 条 CVE 漏洞。