Fallos del tipo CWE-636

79 resultados

Fallback para estado menos seguro em caso de erro

A aplicação, ao encontrar um erro ou falha, recai automaticamente para um modo operacional menos seguro em vez de outras opções disponíveis. Isso pode significar usar algoritmo criptográfico mais fraco, relaxar controles de acesso ou desabilitar verificações de segurança. O risco é que o atacante provoque intencionalmente a falha para forçar a aplicação a operar em modo inseguro.

Ejemplo

Um cliente TLS tenta negociar cifras fortes com o servidor; se falhar, cai para HTTP simples ou SSL 3.0 quebrado. Ou um sistema de autenticação que, ao falhar validação via PKI, aceita login com senha fraca ou até sem autenticação.

Cómo mitigar

Não implemente fallbacks automáticos para modos menos seguros. Se há degradação de segurança, interrompa a operação, registre o evento e alerte o administrador. Garanta que o 'modo seguro' seja a única opção viável, sem alternativas fracas.

CVE-2024-43532HIGHRemote Registry Service Elevation of Privilege VulnerabilityEPSS 12.0%CVE-2023-28840HIGHmoby/moby's dockerd daemon encrypted overlay network may be unauthenticatedEPSS 2.6%CVE-2021-1578HIGHCisco Application Policy Infrastructure Controller Privilege Escalation VulnerabilityEPSS 2.0%CVE-2023-28842MEDIUMmoby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticatedEPSS 1.4%CVE-2025-21210MEDIUMWindows BitLocker Information Disclosure VulnerabilityEPSS 1.1%CVE-2026-53913CRITICALApache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is acceptedEPSS 1.1%CVE-2024-3729CRITICALFrontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form ManipulationEPSS 0.8%CVE-2026-68746HIGHLivebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated accessEPSS 0.8%CVE-2026-53459CRITICALBambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpointsEPSS 0.8%CVE-2026-22034CRITICALSnuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD packageEPSS 0.7%CVE-2023-28841MEDIUMmoby/moby's dockerd daemon encrypted overlay network traffic may be unencryptedEPSS 0.7%CVE-2026-18329HIGHNGINX ngx_http_js_module vulnerabilityEPSS 0.6%CVE-2026-73421CRITICALNextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)EPSS 0.6%CVE-2026-77560HIGHTinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist forEPSS 0.6%CVE-2026-50528HIGH.NET Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2026-95860CRITICALnode-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissionsEPSS 0.6%CVE-2026-40525CRITICALOpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIEPSS 0.6%CVE-2026-81379HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2026-69306HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2026-109593CRITICALAn unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, poteEPSS 0.5%