Skip to content
OpenAdvisories

Weakness (CWE)

CWE-322: Key Exchange without Entity Authentication

Base Draft

The product performs a key exchange with an actor without verifying the identity of that actor.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Ensure that proper authentication is included in the system design.

  2. Implementation

    Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.

Source: MITRE CWE-322

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.