Fallos del tipo CWE-303

109 resultados

Implementação incorreta de algoritmos de autenticação

Ocorre quando o desenvolvedor implementa um algoritmo de autenticação de forma incorreta, desviando do padrão esperado ou cometendo erros lógicos na validação de credenciais. Isso pode permitir que atacantes contornem o mecanismo de autenticação através de entradas malformadas, race conditions ou falhas na comparação de senhas.

Ejemplo

Um sistema que compara senhas usando operadores de igualdade simples (==) em vez de funções timing-safe, permitindo timing attacks. Outro caso: validação de JWT que não verifica assinatura ou aceita algoritmo 'none'. Ou ainda, implementar autenticação multi-fator que deixa um caminho para bypass se a segunda autenticação falhar.

Cómo mitigar

Use bibliotecas de autenticação maduras e bem auditadas (passlib, bcrypt, argon2) em vez de implementar do zero. Aplique testes unitários e de segurança específicos para fluxos de autenticação, incluindo casos de falha. Faça code review focado em algoritmos criptográficos e nunca compare credenciais com == em linguagens tipo Python/Java — use funções timing-safe.

CVE-2026-46389CRITICALUDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`EPSS 0.3%CVE-2024-41829LOWIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connectionEPSS 0.3%CVE-2026-66028HIGHEkushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client EmailEPSS 0.3%CVE-2023-5627HIGHIncorrect Implementation of Authentication Algorithm VulnerabilityEPSS 0.3%CVE-2026-73444MEDIUMOn affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim theEPSS 0.3%CVE-2026-8922MEDIUMOrg.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-servicesEPSS 0.3%CVE-2025-44557HIGHA state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing procesEPSS 0.3%CVE-2025-4676HIGHAuthentication bypass by brute forcing Authentication HeadersEPSS 0.3%CVE-2025-14273HIGHMattermost Jira plugin user spoofing enables Jira request forgery.EPSS 0.3%CVE-2019-25436MEDIUMSricam DeviceViewer 3.12.0.1 Password Change Security BypassEPSS 0.3%CVE-2023-4641MEDIUMShadow-utils: possible password leak during passwd(1) changeEPSS 0.3%CVE-2024-34722HIGHIn smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a proEPSS 0.3%CVE-2025-8881MEDIUMInappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engagEPSS 0.2%CVE-2026-32953MEDIUMTillitis: TKey Client has an Error in Protocol ImplementationEPSS 0.2%CVE-2026-66411MEDIUMDEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker EPSS 0.2%CVE-2025-2475MEDIUMUnauthorized Bot Login Using CredentialsEPSS 0.2%CVE-2025-3230MEDIUMBypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost ServerEPSS 0.2%CVE-2025-48994MEDIUMSignXML's signature verification with HMAC is vulnerable to an algorithm confusion attackEPSS 0.2%CVE-2024-36250LOWMFA Code ReplayEPSS 0.2%CVE-2024-52586MEDIUMeLabFTW MFA bypassEPSS 0.2%