CWE-655—Insufficient Psychological Acceptability

PUBLISHEDweakness record
released 2008-01-30 · last modified 2025-12-11

Metadata

CWE ID：
CWE-655
摘要：
Class
结构：
Simple
状态：
Draft
发布日期：
2008-01-30
更新日期：
2025-12-11

名称

Insufficient Psychological Acceptability

描述

The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism
注释：
By bypassing the security mechanism, a user might leave the system in a less secure state than intended by the administrator, making it more susceptible to compromise.

相关 CWE

browse all CWEs