Skip to content
OpenAdvisories

Weakness (CWE)

CWE-655: Insufficient Psychological Acceptability

Class Draft

The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.

How to prevent it (2 mitigations)

  1. Testing

    Where possible, perform human factors and usability studies to identify where your product's security mechanisms are difficult to use, and why.

  2. Architecture and Design

    Make the security mechanism as seamless as possible, while also providing the user with sufficient details when a security decision produces unexpected results.

Source: MITRE CWE-655

All Critical High Medium Low Exploited only Public exploit

1 result · Feed