CWE-289—Authentication Bypass by Alternate Name

名称

Authentication Bypass by Alternate Name

描述

The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism

相关 CWE

• CWE-1390Weak Authentication