CWE-309—Use of Password System for Primary Authentication

名称

Use of Password System for Primary Authentication

描述

The use of password systems as the primary means of authentication may be subject to several flaws or shortcomings, each reducing the effectiveness of the mechanism.

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism, Gain Privileges or Assume Identity

注释：

A password authentication mechanism error will almost always result in attackers being authorized as valid users.

相关 CWE

• CWE-308Use of Single-factor AuthenticationHigh
• CWE-654Reliance on a Single Factor in a Security Decision
• CWE-1390Weak Authentication