Authentication Bypass by Assumed-Immutable Data

Opis

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

Skutki

• Access Control

  Bypass Protection Mechanism

Zapobieganie

• Architecture and Design, Operation, Implementation

  Implement proper protection for immutable data (e.g. environment variable, hidden form fields, etc.)

Przykłady podatności

• CVE-2002-0367 DebPloit
• CVE-2004-0261 Web auth
• CVE-2002-1730 Authentication bypass by setting certain cookies to "true".
• CVE-2002-1734 Authentication bypass by setting certain cookies to "true".
• CVE-2002-2064 Admin access by setting a cookie.
• CVE-2002-2054 Gain privileges by setting cookie.
• CVE-2004-1611 Product trusts authentication information in cookie.
• CVE-2005-1708 Authentication bypass by setting admin-testing variable to true.
• CVE-2005-1787 Bypass auth and gain privileges by setting a variable.

Słabość nadrzędna

• CWE-1390 Weak Authentication
• CWE-807 Reliance on Untrusted Inputs in a Security Decision

Kiedy powstaje

• Architecture and Design — COMMISSION: This weakness refers to an incorrect design related to an architectural security tactic.
• Implementation

Dotyczy

Not Language-Specific, Not Technology-Specific, Web Based