Falhas do tipo CWE-303

121 resultados

Implementação incorreta de algoritmos de autenticação

Fraqueza que ocorre quando um desenvolvedor implementa mal um algoritmo de autenticação, introduzindo falhas lógicas que permitem bypass ou acesso não autorizado. Pode envolver erros na validação de credenciais, tratamento incorreto de tokens, criptografia fraca ou fluxos de autenticação vulneráveis.

Exemplo

Um sistema verifica se a senha está correta comparando strings sem usar funções de comparação seguras (timing-safe), permitindo ataques de timing onde o atacante infere a senha byte a byte observando diferenças no tempo de resposta. Ou ainda, um JWT validado apenas na estrutura, mas sem verificar a assinatura corretamente.

Como mitigar

Use bibliotecas criptográficas estabelecidas e auditadas em vez de implementar algoritmos manualmente. Faça code review rigoroso de qualquer código de autenticação, aplique testes de segurança específicos e valide contra padrões reconhecidos (OWASP, NIST) antes de ir para produção.

CVE-2023-5627HIGHIncorrect Implementation of Authentication Algorithm VulnerabilityEPSS 0.4%CVE-2023-4860CRITICALInappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer procEPSS 0.4%CVE-2024-8314MEDIUMImproper session handling in B&R APROLEPSS 0.4%CVE-2025-12419CRITICALAccount takeover on OAuth/OpenID-enabled serversEPSS 0.4%CVE-2025-53782HIGHMicrosoft Exchange Server Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-107279HIGHAsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-intEPSS 0.4%CVE-2025-43727HIGHDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasEPSS 0.4%CVE-2026-77244CRITICAL[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty tokenEPSS 0.3%CVE-2026-46389CRITICALUDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`EPSS 0.3%CVE-2026-84296MEDIUMSSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.3%CVE-2024-41829LOWIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connectionEPSS 0.3%CVE-2026-85972HIGHImproper Kerberos server verification in Progress MarkLogic ServerEPSS 0.3%CVE-2026-97720CRITICALApache Impala: Impala Executor Webserver Auth BypassEPSS 0.3%CVE-2026-93394MEDIUMlibmongoc SCRAM client nonce-validation bypassEPSS 0.3%CVE-2026-92873MEDIUMPgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbEPSS 0.3%CVE-2026-73444MEDIUMOn affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim theEPSS 0.3%CVE-2019-25436MEDIUMSricam DeviceViewer 3.12.0.1 Password Change Security BypassEPSS 0.3%CVE-2025-44557HIGHA state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing procesEPSS 0.3%CVE-2026-8922MEDIUMOrg.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-servicesEPSS 0.3%CVE-2025-4676HIGHAuthentication bypass by brute forcing Authentication HeadersEPSS 0.3%