CWE-784—Reliance on Cookies without Validation and Integrity Checking in a Security Decision

名称

Reliance on Cookies without Validation and Integrity Checking in a Security Decision

描述

The product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.

Attackers can easily modify cookies, within the browser or by implementing the client-side code outside of the browser. Attackers can bypass protection mechanisms such as authorization and authentication by modifying the cookie to contain an expected value.

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism, Gain Privileges or Assume Identity

注释：

It is dangerous to use cookies to set a user's privileges. The cookie can be manipulated to claim a high level of authorization, or to claim that successful authentication has occurred.

相关 CWE

• CWE-565Reliance on Cookies without Validation and Integrity Checking
• CWE-807Reliance on Untrusted Inputs in a Security DecisionHigh