Fallos del tipo CWE-693

833 resultados

Falha em Mecanismo de Proteção

É quando um controle de segurança implementado no código falha ou é contornado, permitindo que ameaças que deveriam ser bloqueadas passem. Pode ser autenticação fraca, validação inadequada ou criptografia mal aplicada — o mecanismo existe, mas não funciona conforme deveria.

Ejemplo

Um sistema implementa autenticação por token JWT, mas não valida corretamente a assinatura ou a expiração do token. Um atacante reutiliza um token expirado ou falsificado e acessa a API como usuário autêntico, porque o mecanismo de proteção falhou em sua verificação.

Cómo mitigar

Revise e teste rigorosamente cada mecanismo de segurança (autenticação, autorização, validação de entrada, criptografia). Use bibliotecas maduras e bem auditadas, implemente testes automatizados que verifiquem falhas intencional de proteção, e considere code reviews com foco em segurança.

CVE-2019-1970MEDIUMCisco Firepower Threat Defense Software File Policy Bypass VulnerabilityEPSS 1.5%CVE-2024-23284MEDIUMA logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iEPSS 1.5%CVE-2020-3285MEDIUMCisco Firepower Threat Defense Software SSL/TLS URL Category Bypass VulnerabilityEPSS 1.5%CVE-2019-12697MEDIUMCisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass VulnerabilitiesEPSS 1.5%CVE-2019-12696MEDIUMCisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass VulnerabilitiesEPSS 1.5%CVE-2023-29354MEDIUMMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2023-35352HIGHWindows Remote Desktop Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2024-30052MEDIUMVisual Studio Remote Code Execution VulnerabilityEPSS 1.4%CVE-2020-15174HIGHUnpreventable top-level navigation in ElectronEPSS 1.4%CVE-2026-27893HIGHvLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-outEPSS 1.3%CVE-2026-21671CRITICALA vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilitEPSS 1.3%CVE-2021-31982HIGHMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 1.3%CVE-2026-22709CRITICALvm2 has a Sandbox EscapeEPSS 1.3%CVE-2019-1669HIGHCisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass VulnerabilityEPSS 1.2%CVE-2024-5924HIGHDropbox Desktop Folder Sharing Mark-of-the-Web Bypass VulnerabilityEPSS 1.2%CVE-2025-15422MEDIUMEmpireSoft EmpireCMS IP Address connect.php egetip protection mechanismEPSS 1.2%CVE-2024-43487MEDIUMWindows Mark of the Web Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2018-0297—A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypassEPSS 1.2%CVE-2019-1975MEDIUMCisco HyperFlex Software Cross-Frame Scripting VulnerabilityEPSS 1.2%CVE-2026-32225HIGHWindows Shell Security Feature Bypass VulnerabilityEPSS 1.2%