694
AuthC : "AuthC" is used as an abbreviation of "authentication," but it appears to used less
frequently than "AuthN."
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Availability
Access Control
Read Application Data
Gain Privileges or Assume Identity
Execute Unauthorized Code or Commands
This weakness can lead to the exposure of resources
or functionality to unintended actors, possibly providing
attackers with sensitive information or even execute
arbitrary code.
Detection Methods
Automated Static Analysis
Automated static analysis is useful for detecting certain types of authentication. A tool may be
able to analyze related configuration files, such as .htaccess in Apache web servers, or detect
the usage of commonly-used authentication libraries. Generally, automated static analysis tools
have difficulty detecting custom authentication schemes. In addition, the software's design may
include some functionality that is accessible to any user and does not require an established
identity; an automated technique that detects the absence of authentication may report false
positives.
Effectiveness = Limited
Manual Static Analysis
This weakness can be detected using tools and techniques that require manual (human)
analysis, such as penetration testing, threat modeling, and interactive tools that allow the tester
to record and modify an active session. Manual static analysis is useful for evaluating the
correctness of custom authentication mechanisms.
Effectiveness = High
These may be more effective than strictly automated techniques. This is especially the case with
weaknesses that are related to design and business rules.
Manual Static Analysis - Binary or Bytecode
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Binary / Bytecode disassembler - then use manual analysis for vulnerabilities &
anomalies
Effectiveness = SOAR Partial
Dynamic Analysis with Automated Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Web Application Scanner Web Services Scanner Database Scanners
Effectiveness = SOAR Partial
Dynamic Analysis with Manual Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Fuzz Tester Framework-based Fuzzer
Effectiveness = SOAR Partial
Manual Static Analysis - Source Code
CWE Version 4.14
CWE-287: Improper Authentication
CWE-287: Improper Authentication