Fallos del tipo CWE-322

26 resultados

Troca de chaves sem autenticação da entidade

A aplicação realiza troca criptográfica de chaves (para estabelecer comunicação segura) sem verificar a identidade do outro lado da conexão. Um atacante se passa pela parte legítima, intercepta ou manipula as chaves, e consegue ler ou alterar toda a comunicação que deveria ser protegida.

Ejemplo

Um cliente se conecta a um servidor para negociar uma chave de sessão TLS, mas não valida o certificado do servidor ou qualquer outro identificador. Um atacante na rede se interõe, oferece sua própria chave, e ambos os lados conversam criptografados — mas com o atacante no meio, descriptografando tudo.

Cómo mitigar

Implemente autenticação mútua (client-side e server-side) antes ou durante a troca de chaves: valide certificados digitais, use assinaturas criptográficas, ou autenticação por desafio-resposta. Sempre verifique a identidade do par antes de confiar nas chaves trocadas.

CVE-2026-1709CRITICALKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authenticationEPSS 5.4%CVE-2022-39249HIGHMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessionsEPSS 1.0%CVE-2022-39250HIGHMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verificationEPSS 1.0%CVE-2022-39251HIGHMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusionEPSS 0.9%CVE-2022-39255HIGHMatrix iOS SDK vulnerable ton Olm/Megolm protocol confusionEPSS 0.8%CVE-2022-39248HIGHmatrix-android-sdk2 vulnerable to Olm/Megolm protocol confusionEPSS 0.8%CVE-2022-39257HIGHMatrix iOS SDK vulnerable to impersonation via forwarded Megolm sessionsEPSS 0.8%CVE-2022-39246HIGHmatrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessionsEPSS 0.7%CVE-2024-4871MEDIUMForeman: host ssh key not being checked in remote executionEPSS 0.6%CVE-2026-45361HIGHApache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)EPSS 0.6%CVE-2022-39254HIGHWhen matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarderEPSS 0.6%CVE-2022-39252HIGHWhen matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarderEPSS 0.5%CVE-2026-58065HIGHApache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verificationEPSS 0.5%CVE-2025-62501HIGHSSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53EPSS 0.5%CVE-2025-20163HIGHCisco Nexus Dashboard Fabric Controller SSH Host Key VulnerabilityEPSS 0.4%CVE-2024-47519HIGHBackup uploads to ETM subject to man-in-the-middle interceptionEPSS 0.3%CVE-2024-6572MEDIUMImproper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'EPSS 0.3%CVE-2021-34433—In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally suEPSS 0.3%CVE-2025-13914HIGHApstra: SSH host key validation vulnerability for managed devicesEPSS 0.3%CVE-2026-18654MEDIUMDisabled SSH host key verification in Amazon AWS CLI EMR helper commandsEPSS 0.3%