882
Reference Description
CVE-2002-0862 Browser does not verify Basic Constraints of a certificate, even though it is
required, allowing spoofing of trusted certificates.
https://www.cve.org/CVERecord?id=CVE-2002-0862
CVE-2002-0970 Browser does not verify Basic Constraints of a certificate, even though it is
required, allowing spoofing of trusted certificates.
https://www.cve.org/CVERecord?id=CVE-2002-0970
CVE-2002-1407 Browser does not verify Basic Constraints of a certificate, even though it is
required, allowing spoofing of trusted certificates.
https://www.cve.org/CVERecord?id=CVE-2002-1407
CVE-2005-0198 Logic error prevents some required conditions from being enforced during
Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5).
https://www.cve.org/CVERecord?id=CVE-2005-0198
CVE-2004-2163 Shared secret not verified in a RADIUS response packet, allowing
authentication bypass by spoofing server replies.
https://www.cve.org/CVERecord?id=CVE-2004-2163
CVE-2005-2181 Insufficient verification in VoIP implementation, in violation of standard, allows
spoofed messages.
https://www.cve.org/CVERecord?id=CVE-2005-2181
CVE-2005-2182 Insufficient verification in VoIP implementation, in violation of standard, allows
spoofed messages.
https://www.cve.org/CVERecord?id=CVE-2005-2182
CVE-2005-2298 Security check not applied to all components, allowing bypass.
https://www.cve.org/CVERecord?id=CVE-2005-2298
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 978 SFP Secondary Cluster: Implementation 888 2408
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Notes
Relationship
This is a "missing step" error on the product side, which can overlap weaknesses such as
insufficient verification and spoofing. It is frequently found in cryptographic and authentication
errors. It is sometimes resultant.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Improperly Implemented Security
Check for Standard
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
Weakness ID : 359
Structure : Simple
Abstraction : Base
Description
CWE Version 4.14
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor