2267
by-270000-projects-vulnerable-to-octal-input-data-server-side-request-forgery-remote-file-inclusionlocal-
file-inclusion-and-more-cve-2021-28918/ >.
CWE-1390: Weak Authentication
Weakness ID : 1390
Structure : Simple
Abstraction : Class
Description
The product uses an authentication mechanism to restrict access to specific users or identities, but
the mechanism does not sufficiently prove that the claimed identity is correct.
Extended Description
Attackers may be able to bypass weak authentication faster and/or with less effort than expected.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 287 Improper Authentication 692
ParentOf 262 Not Using Password Aging 633
ParentOf 263 Password Aging with Long Expiration 636
ParentOf 289 Authentication Bypass by Alternate Name 703
ParentOf 290 Authentication Bypass by Spoofing 705
ParentOf 294 Authentication Bypass by Capture-replay 712
ParentOf 301 Reflection Attack in an Authentication Protocol 733
ParentOf 302 Authentication Bypass by Assumed-Immutable Data 735
ParentOf 303 Incorrect Implementation of Authentication Algorithm 737
ParentOf 305 Authentication Bypass by Primary Weakness 740
ParentOf 307 Improper Restriction of Excessive Authentication Attempts 747
ParentOf 308 Use of Single-factor Authentication 752
ParentOf 309 Use of Password System for Primary Authentication 754
ParentOf 522 Insufficiently Protected Credentials 1225
ParentOf 593 Authentication Bypass: OpenSSL CTX Object Modified after
SSL Objects are Created