789
attacker to impersonate an actor by modifying traffic between the two entities. Typically, this
involves a victim client that contacts a malicious server that is impersonating a trusted server. If the
client skips authentication or ignores an authentication failure, the malicious server may request
authentication information from the user. The malicious server can then use this authentication
information to log in to the trusted server using the victim's credentials, sniff traffic between the
victim and trusted server, etc.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 306 Missing Authentication for Critical Function 741
PeerOf 295 Improper Certificate Validation 714
PeerOf 295 Improper Certificate Validation 714
CanPrecede 923 Improper Restriction of Communication Channel to Intended
Endpoints