CWE-302—Authentication Bypass by Assumed-Immutable Data

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-302
摘要：
Base
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Authentication Bypass by Assumed-Immutable Data

描述

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism

相关 CWE

browse all CWEs