Fallos del tipo CWE-303

121 resultados

Implementação incorreta de algoritmos de autenticação

Ocorre quando o desenvolvedor implementa um algoritmo de autenticação de forma incorreta, desviando do padrão esperado ou cometendo erros lógicos na validação de credenciais. Isso pode permitir que atacantes contornem o mecanismo de autenticação através de entradas malformadas, race conditions ou falhas na comparação de senhas.

Ejemplo

Um sistema que compara senhas usando operadores de igualdade simples (==) em vez de funções timing-safe, permitindo timing attacks. Outro caso: validação de JWT que não verifica assinatura ou aceita algoritmo 'none'. Ou ainda, implementar autenticação multi-fator que deixa um caminho para bypass se a segunda autenticação falhar.

Cómo mitigar

Use bibliotecas de autenticação maduras e bem auditadas (passlib, bcrypt, argon2) em vez de implementar do zero. Aplique testes unitários e de segurança específicos para fluxos de autenticação, incluindo casos de falha. Faça code review focado em algoritmos criptográficos e nunca compare credenciais com == em linguagens tipo Python/Java — use funções timing-safe.

CVE-2023-5627HIGHIncorrect Implementation of Authentication Algorithm VulnerabilityEPSS 0.4%CVE-2023-4860CRITICALInappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer procEPSS 0.4%CVE-2024-8314MEDIUMImproper session handling in B&R APROLEPSS 0.4%CVE-2025-12419CRITICALAccount takeover on OAuth/OpenID-enabled serversEPSS 0.4%CVE-2025-53782HIGHMicrosoft Exchange Server Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-107279HIGHAsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-intEPSS 0.4%CVE-2025-43727HIGHDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasEPSS 0.4%CVE-2026-77244CRITICAL[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty tokenEPSS 0.3%CVE-2026-46389CRITICALUDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`EPSS 0.3%CVE-2026-84296MEDIUMSSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.3%CVE-2024-41829LOWIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connectionEPSS 0.3%CVE-2026-85972HIGHImproper Kerberos server verification in Progress MarkLogic ServerEPSS 0.3%CVE-2026-97720CRITICALApache Impala: Impala Executor Webserver Auth BypassEPSS 0.3%CVE-2026-93394MEDIUMlibmongoc SCRAM client nonce-validation bypassEPSS 0.3%CVE-2026-92873MEDIUMPgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbEPSS 0.3%CVE-2026-73444MEDIUMOn affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim theEPSS 0.3%CVE-2019-25436MEDIUMSricam DeviceViewer 3.12.0.1 Password Change Security BypassEPSS 0.3%CVE-2025-44557HIGHA state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing procesEPSS 0.3%CVE-2026-8922MEDIUMOrg.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-servicesEPSS 0.3%CVE-2025-4676HIGHAuthentication bypass by brute forcing Authentication HeadersEPSS 0.3%