CWE-602 服务端安全的客户端实施 类弱点 88 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-602 指客户端执行服务端安全机制的漏洞，属于逻辑设计缺陷。攻击者通过修改客户端代码或拦截请求，绕过前端限制直接与服务端交互，从而获取未授权访问或执行恶意操作。开发者应避免依赖前端进行敏感验证，必须确保所有安全控制逻辑均在服务端独立实施，以保障数据完整性与系统安全性。
$server = "server.example.com"; $username = AskForUserName(); $password = AskForPassword(); $address = AskForAddress(); $sock = OpenSocket($server, 1234); writeSocket($sock, "AUTH $username $password\n"); $resp = readSocket($sock); if ($resp eq "success") { # username/pass is valid, go ahead and update the info! writeSocket($sock, "CHANGE-ADDRESS $username $address\n"; } else { print "ERROR: Invalid Authentication!\n"; }$sock = acceptSocket(1234); ($cmd, $args) = ParseClientRequest($sock); if ($cmd eq "AUTH") { ($username, $pass) = split(/\s+/, $args, 2); $result = AuthenticateUser($username, $pass); writeSocket($sock, "$result\n"); # does not close the socket on failure; assumes the # user will try again } elsif ($cmd eq "CHANGE-ADDRESS") { if (validateAddress($args)) { $res = UpdateDatabaseRecord($username, "address", $args); writeSocket($sock, "SUCCESS\n"); } else { writeSocket($sock, "FAILURE -- address is malformed\n"); } }CWE-602（服务端安全的客户端实施） 是常见的弱点类别，本平台收录该类弱点关联的 88 条 CVE 漏洞。