Skip to content
OpenAdvisories

Weakness (CWE)

CWE-291: Reliance on IP Address for Authentication

Variant Incomplete

The product uses an IP address for authentication.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate. While IP address verification can be a useful part of an authentication scheme, but it should not be the single factor required for authentication.

Source: MITRE CWE-291

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.