1385
While the code confirms that the requesting user typed the same new password twice, it does not
confirm that the user requesting the password change is the same user whose password will be
changed. An attacker can request a change of another user's password and gain control of the
victim's account.
Observed Examples
Reference Description
CVE-2007-0681 Web app allows remote attackers to change the passwords of arbitrary
users without providing the original password, and possibly perform other
unauthorized actions.
https://www.cve.org/CVERecord?id=CVE-2007-0681
CVE-2000-0944 Web application password change utility doesn't check the original password.
https://www.cve.org/CVERecord?id=CVE-2000-0944
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 724 OWASP Top Ten 2004 Category A3 - Broken
Authentication and Session Management
711 2335
MemberOf 930 OWASP Top Ten 2013 Category A2 - Broken
Authentication and Session Management
928 2389
MemberOf 952 SFP Secondary Cluster: Missing Authentication 888 2396
MemberOf 1028 OWASP Top Ten 2017 Category A2 - Broken
Authentication
1026 2436
MemberOf 1353 OWASP Top Ten 2021 Category A07:2021 -
Identification and Authentication Failures
1344 2494
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
OWASP Top Ten 2004 A3 CWE More Specific Broken Authentication and Session
Management
Software Fault Patterns SFP31 Missing authentication
References
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
CWE-621: Variable Extraction Error
Weakness ID : 621
Structure : Simple
Abstraction : Variant
Description
The product uses external input to determine the names of variables into which information is
extracted, without verifying that the names of the specified variables are valid. This could cause the
program to overwrite unintended variables.
Extended Description
For example, in PHP, extraction can be used to provide functionality similar to register_globals,
a dangerous functionality that is frequently disabled in production systems. Calling extract() or
CWE Version 4.14
CWE-621: Variable Extraction Error
CWE-621: Variable Extraction Error