742
Nature Type ID Name Page
MemberOf 1010 Authenticate Actors 2424
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1211 Authentication Errors 2475
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Cloud Computing (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Often)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Access Control
Other
Gain Privileges or Assume Identity
Other
Exposing critical functionality essentially provides an
attacker with the privilege level of that functionality.
The consequences will depend on the associated
functionality, but they can range from reading or modifying
sensitive data, access to administrative or other privileged
functionality, or possibly even execution of arbitrary code.
Detection Methods
Manual Analysis
This weakness can be detected using tools and techniques that require manual (human)
analysis, such as penetration testing, threat modeling, and interactive tools that allow the
tester to record and modify an active session. Specifically, manual static analysis is useful for
evaluating the correctness of custom authentication mechanisms.
Automated Static Analysis
Automated static analysis is useful for detecting commonly-used idioms for authentication. A tool
may be able to analyze related configuration files, such as .htaccess in Apache web servers, or
detect the usage of commonly-used authentication libraries. Generally, automated static analysis
tools have difficulty detecting custom authentication schemes. In addition, the software's design
may include some functionality that is accessible to any user and does not require an established
identity; an automated technique that detects the absence of authentication may report false
positives.
Effectiveness = Limited
Manual Static Analysis - Binary or Bytecode
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Binary / Bytecode disassembler - then use manual analysis for vulnerabilities &
anomalies
Effectiveness = SOAR Partial
Dynamic Analysis with Automated Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Web Application Scanner Web Services Scanner Database Scanners
Effectiveness = SOAR Partial
CWE Version 4.14
CWE-306: Missing Authentication for Critical Function
CWE-306: Missing Authentication for Critical Function