CWE-322: Key Exchange without Entity Authentication
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product performs a key exchange with an actor without verifying the identity of that actor.
扩展描述
Performing a key exchange will preserve the integrity of the information sent between two entities, but this will not guarantee that the entities are who they claim they are. This may enable an attacker to impersonate an actor by modifying traffic between the two entities. Typically, this involves a victim client that contacts a malicious server that is impersonating a trusted server. If the client skips authentication or ignores an authentication failure, the malicious server may request authentication information from the user. The malicious server can then use this authentication information to log in to the trusted server using the victim's credentials, sniff traffic between the victim and trusted server, etc.
常见后果
影响范围: Access Control
技术影响: Bypass Protection Mechanism
说明: No authentication takes place in this process, bypassing an assumed protection of encryption.
影响范围: Confidentiality
技术影响: Read Application Data
说明: The encrypted communication between a user and a trusted host may be subject to sniffing by any actor in the communication path.
潜在缓解措施
阶段: Architecture and Design
描述: Ensure that proper authentication is included in the system design.
阶段: Implementation
描述: Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.
引入模式
| 阶段 | 说明 |
|---|---|
| Architecture and Design | OMISSION: This weakness is caused by missing a security tactic during the architecture and design phase. |
适用平台
编程语言
分类映射
| 分类名称 | 条目ID | 条目名称 | 映射适配度 |
|---|---|---|---|
| CLASP | - | Key exchange without entity authentication | - |