이름: Authentication Errors

Weaknesses in this category are related to authentication components of a system. Frequently these deal with the ability to verify that an entity is indeed who it claims to be. If not addressed when designing or implementing a software system, these weaknesses could lead to a degradation of the quality of the authentication capability.

CWE 구성원 목록

CWE-289: Authentication Bypass by Alternate Name 기본

CWE-290: Authentication Bypass by Spoofing 기본

CWE-294: Authentication Bypass by Capture-replay 기본

CWE-295: Improper Certificate Validation 기본

CWE-301: Reflection Attack in an Authentication Protocol 기본

CWE-303: Incorrect Implementation of Authentication Algorithm 기본

CWE-305: Authentication Bypass by Primary Weakness 기본

CWE-306: Missing Authentication for Critical Functionality 기본

CWE-307: Improper Restriction of Excessive Authentication Attempts 기본

CWE-308: Use of Single-factor Authentication 기본

CWE-309: Use of Password System for Primary Authentication 기본

CWE-322: Key Exchange without Entity Authentication 기본

CWE-603: Use of Client-Side Authentication 기본

CWE-645: Overly Restrictive Account Lockout Mechanism 기본

CWE-804: Guessable CAPTCHA 기본

CWE-836: Use of Password Hash Instead of Password for Authentication 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2019-12-30 +00:00	2020-02-24 +00:00	4.0

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes, Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

CWE-1211 카테고리 상세 정보

CWE-1211