1827
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1010 Authenticate Actors 2424
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1211 Authentication Errors 2475
MemberOf 1214 Data Integrity Issues 2477
MemberOf 320 Key Management Errors 2319
MemberOf 417 Communication Channel Errors 2325
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Access Control Bypass Protection Mechanism
No authentication takes place in this process, bypassing
an assumed protection of encryption.
Confidentiality Read Application Data
The encrypted communication between a user and a
trusted host may be subject to sniffing by any actor in the
communication path.
Potential Mitigations
Phase: Architecture and Design
Ensure that proper authentication is included in the system design.
Phase: Implementation
CWE Version 4.14
CWE-323: Reusing a Nonce, Key Pair in Encryption
CWE-323: Reusing a Nonce, Key Pair in Encryption