CWE-307—Improper Restriction of Excessive Authentication Attempts

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
CWE-307 - Improper Restriction of Excessive Authentication Attempts - Diagram

Metadata

CWE ID：
CWE-307
摘要：
Base
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Improper Restriction of Excessive Authentication Attempts

描述

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism
注释：
An attacker could perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to the targeted account using a brute force attack.

相关 CWE

browse all CWEs