CWE-301 Reflection Attack in an Authentication Protocol
baseSimple authentication protocols are subject to reflection attacks if a malicious user can use the target machine to impersonate a trusted user.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9497US | high8.1 | — | ||
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an at… | ||||
| CVE-2022-1579US | high7.5 | — | ||
The function check_is_login_page() uses headers for the IP check, which can be easily spoofed. | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan