CWE-303—Incorrect Implementation of Authentication Algorithm

名称

Incorrect Implementation of Authentication Algorithm

描述

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

This incorrect implementation may allow authentication to be bypassed.

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism

相关 CWE

• CWE-1390Weak Authentication