Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CWE-287 (认证机制不恰当) — Vulnerability Class 1450

1450 vulnerabilities classified as CWE-287 (认证机制不恰当). AI Chinese analysis included.

CWE-287 represents a critical authentication weakness where a system fails to adequately verify the identity of an actor claiming a specific identity. This flaw typically allows attackers to bypass security controls by exploiting insufficient verification mechanisms, enabling unauthorized access through stolen credentials, brute-force attacks, or session hijacking. When authentication logic is flawed, malicious entities can impersonate legitimate users, leading to severe data breaches and privilege escalation. Developers mitigate this risk by implementing robust, multi-factor authentication protocols and ensuring that identity verification processes are rigorous and resistant to common attack vectors. By strictly validating credentials against secure, hashed databases and employing adaptive security measures, organizations can significantly reduce the likelihood of unauthorized access, thereby protecting sensitive information and maintaining system integrity against sophisticated cyber threats.

MITRE CWE Description
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Common Consequences (1)
Integrity, Confidentiality, Availability, Access ControlRead Application Data, Gain Privileges or Assume Identity, Execute Unauthorized Code or Commands
This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.
Mitigations (1)
Architecture and DesignUse an authentication framework or library such as the OWASP ESAPI Authentication feature.
Examples (2)
The following code intends to ensure that the user is already logged in. If not, the code performs authentication with the user-provided username and password. If successful, it sets the loggedin and user cookies to "remember" that the user has already logged in. Finally, the code performs administrator tasks if the logged-in user has the "Administrator" username, as recorded in the user cookie.
my $q = new CGI; if ($q->cookie('loggedin') ne "true") { if (! AuthenticateUser($q->param('username'), $q->param('password'))) { ExitError("Error: you need to log in first"); } else { # Set loggedin and user cookies. $q->cookie( -name => 'loggedin', -value => 'true' ); $q->cookie( -name => 'user', -value => $q->param('username') ); } } if ($q->cookie('user') eq "Administrator") { DoAdministratorTasks(); }
Bad · Perl
GET /cgi-bin/vulnerable.cgi HTTP/1.1 Cookie: user=Administrator Cookie: loggedin=true [body of request]
Attack
In January 2009, an attacker was able to gain administrator access to a Twitter server because the server did not restrict the number of login attempts [REF-236]. The attacker targeted a member of Twitter's support team and was able to successfully guess the member's password using a brute force attack by guessing a large number of common words. After gaining access as the member of the support st…
CVE IDTitleCVSSSeverityPublished
CVE-2017-7937 Phoenix Contact GmbH mGuard 授权问题漏洞 — Phoenix Contact GmbH mGuard 8.9 -2017-05-19
CVE-2017-7921 多款Hikvision产品安全漏洞 — Hikvision Cameras 10.0 -2017-05-06
CVE-2017-6617 Cisco Integrated Management Controller 安全漏洞 — Cisco Integrated Management Controller 5.4 -2017-04-20
CVE-2017-3791 Cisco Prime Home 安全漏洞 — Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1 9.8 -2017-02-01
CVE-2014-5412 Schneider Electric SCADA Expert ClearSCADA Improper Authentication — ClearSCADA 6.5 -2014-09-18
CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication — CECX-X-C1 Modular Master Controller with CoDeSys 9.8 -2014-04-25
CVE-2014-0769 Festo CECX-X-(C1/M1) Controller Improper Authentication — CECX-X-C1 Modular Master Controller with CoDeSys 7.5 -2014-04-25
CVE-2012-6437 Rockwell Automation ControlLogix PLC Improper Authentication — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 9.8 -2013-01-24
CVE-2012-6440 Rockwell Automation ControlLogix PLC Improper Input Validation — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 9.1 -2013-01-24
CVE-2012-5864 Sinapsi eSolar Improper Authentication — eSolar 9.8 -2012-11-23

Vulnerabilities classified as CWE-287 (认证机制不恰当) represent 1450 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.