目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-640 忘记口令恢复机制弱 类漏洞列表 130

CWE-640 忘记口令恢复机制弱 类弱点 130 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-640属于身份验证绕过类漏洞，指应用程序在用户忘记密码时提供的恢复机制存在安全缺陷。攻击者通常利用该弱点，通过猜测简单安全问题、拦截重置链接或暴力破解临时令牌，从而非法重置密码并接管账户。开发者应避免使用可预测的恢复凭据，采用多因素认证、发送一次性动态验证码至受控邮箱或手机，并实施速率限制以增强恢复流程的安全性。

MITRE CWE 官方描述
CWE：CWE-640 遗忘密码的弱密码恢复机制 英文：产品包含一种允许用户在不知道原始密码的情况下恢复或更改密码的机制，但该机制存在弱点。 应用程序通常具备一种机制，以便在用户忘记密码时提供访问其账户的途径。然而，密码恢复机制往往存在弱点，这使得除合法系统用户之外的其他人更有可能获得该用户账户的访问权限。弱密码恢复方案会完全破坏强密码认证方案的有效性。这种弱点可能表现为安全提示问题过于简单，容易被猜测或找到答案（例如，因为问题过于常见，或者答案可以通过社交媒体获取）。或者，密码恢复机制的代码可能存在实现弱点，例如欺骗系统将新密码发送到用户之外的其他电子邮件账户。密码重置的频率可能缺乏速率限制（throttling），导致攻击者通过快速连续尝试恢复密码，从而对合法用户造成服务拒绝（denial of service）。系统可能会向用户发送原始密码，而不是生成新的临时密码。总之，密码恢复功能如果未经过仔细设计和实现，往往会成为系统中最薄弱的环节，可能被滥用，从而使攻击者能够未经授权地访问系统。
常见影响 (3)
Access ControlGain Privileges or Assume Identity
An attacker could gain unauthorized access to the system by retrieving legitimate user's authentication credentials.
AvailabilityDoS: Resource Consumption (Other)
An attacker could deny service to legitimate system users by launching a brute force attack on the password recovery mechanism using user ids of legitimate users.
Integrity, OtherOther
The system's security functionality is turned against the system by the attacker.
缓解措施 (5)
Architecture and DesignMake sure that all input supplied by the user to the password recovery mechanism is thoroughly filtered and validated.
Architecture and DesignDo not use standard weak security questions and use several security questions.
Architecture and DesignMake sure that there is throttling on the number of incorrect answers to a security question. Disable the password recovery functionality after a certain (small) number of incorrect guesses.
Architecture and DesignRequire that the user properly answers the security question prior to resetting their password and sending the new password to the e-mail address of record.
Architecture and DesignNever allow the user to control what e-mail address the new password will be sent to in the password recovery mechanism.
代码示例 (1)
A famous example of this type of weakness being exploited is the eBay attack. eBay always displays the user id of the highest bidder. In the final minutes of the auction, one of the bidders could try to log in as the highest bidder three times. After three incorrect log in attempts, eBay password throttling would kick in and lock out the highest bidder's account for some time. An attacker could th…
CVE ID标题CVSS风险等级Published
CVE-2022-22691 Umbraco 环境问题漏洞 — Umbraco CMS 6.8 Medium2022-01-18
CVE-2021-25961 SuiteCRM 授权问题漏洞 — SuiteCRM 8.0 High2021-09-29
CVE-2021-25957 Dolibarr 授权问题漏洞 — dolibarr 8.8 High2021-08-17
CVE-2021-37693 Discourse 代码问题漏洞 — discourse 5.3 Medium2021-08-13
CVE-2021-36804 Akaunting 授权问题漏洞 — Akaunting 5.4 Medium2021-08-04
CVE-2021-22763 Schneider-electric PowerLogic 多款产品授权问题漏洞 — PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) 9.8 -2021-06-11
CVE-2021-22731 Schneider Electric 授权问题漏洞 — Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior 9.8 -2021-05-26
CVE-2020-5361 Dell Client Commercial and Consumer 授权问题漏洞 — CPG BIOS 5.1 Medium2021-01-04
CVE-2019-6560 Auto-Maskin 授权问题漏洞 — Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App) 9.1 -2020-03-23
CVE-2018-16529 Forcepoint Email Security 授权问题漏洞 — Forcepoint Email Security 9.8 -2019-03-28

CWE-640（忘记口令恢复机制弱） 是常见的弱点类别，本平台收录该类弱点关联的 130 条 CVE 漏洞。