713
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1211 Authentication Errors 2475
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Access Control Gain Privileges or Assume Identity
Messages sent with a capture-relay attack allow access
to resources which are not otherwise accessible without
proper authentication.
Potential Mitigations
Phase: Architecture and Design
Utilize some sequence or time stamping functionality along with a checksum which takes this into
account in order to ensure that messages can be parsed only once.
Phase: Architecture and Design
Since any attacker who can listen to traffic can see sequence numbers, it is necessary to sign
messages with some kind of cryptography to ensure that sequence numbers are not simply
doctored along with content.
Observed Examples
Reference Description
CVE-2005-3435 product authentication succeeds if user-provided MD5 hash matches the hash
in its database; this can be subjected to replay attacks.
https://www.cve.org/CVERecord?id=CVE-2005-3435
CVE-2007-4961 Chain: cleartext transmission of the MD5 hash of password (CWE-319)
enables attacks against a server that is susceptible to replay (CWE-294).
https://www.cve.org/CVERecord?id=CVE-2007-4961
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 956 SFP Secondary Cluster: Channel Attack 888 2397
MemberOf 1353 OWASP Top Ten 2021 Category A07:2021 -
Identification and Authentication Failures
1344 2494
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Authentication bypass by replay
CLASP Capture-replay
Related Attack Patterns
CWE Version 4.14
CWE-295: Improper Certificate Validation
CWE-295: Improper Certificate Validation