Umbra Wiki weakness weakness/CWE-345
Back to wiki

CWE-345 — Insufficient Verification of Data Authenticity

provenance: imported · CWE: CWE-345

CWE-345: Insufficient Verification of Data Authenticity

MITRE CWE weakness

Kind Weakness
Abstraction Class
Status Draft
Likelihood of exploit

Description

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Common consequences

  • Integrity, Other: Varies by Context, Unexpected State

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/345.html
  • CWE list: https://cwe.mitre.org/data/index.html