CWE-1390 — Weak Authentication

provenance: imported · CWE: CWE-1390

CWE-1390: Weak Authentication

MITRE CWE weakness


Kind	Weakness
Abstraction	Class
Status	Incomplete
Likelihood of exploit	—

Description

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Attackers may be able to bypass weak authentication faster and/or with less effort than expected.

Common consequences

Integrity, Confidentiality, Availability, Access Control: Read Application Data, Gain Privileges or Assume Identity, Execute Unauthorized Code or Commands

Mitigations

(none listed)

References

CWE page: https://cwe.mitre.org/data/definitions/1390.html
CWE list: https://cwe.mitre.org/data/index.html