Weaknesses of type CWE-353

54 results

Ausência de verificação de integridade

A aplicação transmite ou armazena dados sem mecanismos que garantam que eles não foram alterados. Um atacante consegue modificar os dados em trânsito ou em repouso sem ser detectado, comprometendo a confiabilidade das informações processadas.

Example

Um serviço envia um arquivo de configuração pela rede sem hash ou assinatura digital. Um atacante intercepta o arquivo e muda parâmetros críticos; o servidor aplica a configuração modificada sem saber que foi adulterada.

How to mitigate

Implemente verificação de integridade usando HMAC, assinatura digital (RSA, ECDSA) ou hash criptográfico (SHA-256). Valide sempre a integridade antes de processar dados sensíveis, especialmente em APIs, arquivos de configuração e dados em repouso.

CVE-2021-28545HIGHAcrobat Reader DC Missing Support for Integrity CheckEPSS 2.5%CVE-2021-28546MEDIUMAcrobat Reader DC Missing Support for Integrity CheckEPSS 1.5%CVE-2019-10943—A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.EPSS 1.0%CVE-2020-10124—NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host EPSS 0.7%CVE-2020-7878—An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue isEPSS 0.7%CVE-2020-7808HIGHRAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerabilityEPSS 0.7%CVE-2023-29290MEDIUMAdobe Commerce Guest Cart Shipping Address Overwrite IDOR EPSS 0.6%CVE-2021-26608HIGHhandysoft groupware arbitrary file download and execution vulnerabilityEPSS 0.6%CVE-2019-19160MEDIUMReportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxpEPSS 0.6%CVE-2019-11480HIGHUbuntu kernel snap build process could use unauthenticated sourcesEPSS 0.5%CVE-2020-10266HIGHRVD#1487: No integrity checks on UR+ platform artifacts when installed in the robotEPSS 0.5%CVE-2021-26610HIGHgodomall5 remote code execution vulnerabilityEPSS 0.5%CVE-2020-7810HIGHHandySoft ActiveX File Download and Execution VulnerabilityEPSS 0.4%CVE-2019-12804HIGHHunesion i-oneNet Missing Support for Integrity Check vulnerabilityEPSS 0.4%CVE-2026-58224MEDIUMSamba: ctdb fails to do integrity checking of received packetsEPSS 0.3%CVE-2026-79801CRITICALUnauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client AgentEPSS 0.3%CVE-2026-76751CRITICALMissing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code ExecutionEPSS 0.3%CVE-2025-10010MEDIUMIntegrity Validation Bypass in CryptoPro Secure Disk for BitLockerEPSS 0.3%CVE-2025-48811MEDIUMWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-48803MEDIUMWindows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityEPSS 0.3%