Skip to content
OpenAdvisories

Weakness (CWE)

CWE-302: Authentication Bypass by Assumed-Immutable Data

Base Incomplete

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

How to prevent it (1 mitigation)

  1. Architecture and Design, Operation, Implementation

    Implement proper protection for immutable data (e.g. environment variable, hidden form fields, etc.)

Source: MITRE CWE-302

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.