BaseDraft

CWE-309Use of Password System for Primary Authentication

Category: auth

Description

The use of password systems as the primary means of authentication may be subject to several flaws or shortcomings, each reducing the effectiveness of the mechanism.

Common consequences· 1

  • Access Control — Bypass Protection Mechanism, Gain Privileges or Assume Identity
    A password authentication mechanism error will almost always result in attackers being authorized as valid users.

Potential mitigations· 5

  • [Architecture and Design]
  • [Architecture and Design]Use a zero-knowledge password protocol, such as SRP.
  • [Architecture and Design]Ensure that passwords are stored safely and are not reversible.
  • [Architecture and Design]Implement password aging functionality that requires passwords be changed after a certain point.
  • [Architecture and Design]Use a mechanism for determining the strength of a password and notify the user of weak password use.

Related CAPEC attack patterns· 12

CAPEC-16CAPEC-49CAPEC-509CAPEC-55CAPEC-555CAPEC-560CAPEC-561CAPEC-565CAPEC-600CAPEC-652CAPEC-653CAPEC-70

References

  1. https://cwe.mitre.org/data/definitions/309.html

Exploits (incoming)12

TypeTargetConfidenceTier
AttackPatternCredential Stuffingcapec-600100%live
AttackPatternUse of Known Kerberos Credentialscapec-652100%live
AttackPatternTry Common or Default Usernames and Passwordscapec-70100%live
AttackPatternPassword Sprayingcapec-565100%live
AttackPatternRainbow Table Password Crackingcapec-55100%live
AttackPatternUse of Known Operating System Credentialscapec-653100%live
AttackPatternDictionary-based Password Attackcapec-16100%live
AttackPatternPassword Brute Forcingcapec-49100%live
AttackPatternUse of Known Domain Credentialscapec-560100%live
AttackPatternRemote Services with Stolen Credentialscapec-555100%live
AttackPatternKerberoastingcapec-509100%live
AttackPatternWindows Admin Shares with Stolen Credentialscapec-561100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Authentication Bypass by Primary Weakness
CWE
Storing Passwords in a Recoverable Format
CWE
Use of Password Hash Instead of Password for Authentication
CWE
Reliance on a Single Factor in a Security Decision
CWE
Use of Single-factor Authentication
CWE
Authentication Bypass by Spoofing
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.