CWE-654 Reliance on a Single Factor in a Security Decision

base

A protection mechanism relies exclusively, or to a large extent, on the evaluation of a single condition or the integrity of a single object or entity in order to make a decision about granting access to restricted resources or functionality.

01

parent weaknesses

Broader classes this is a kind of.

02

child weaknesses

More specific entries beneath this one.

03

vulnerabilities (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-24771USmedium5.9—
Open Forms allows users create and publish smart forms. Versions prior to 2.2.9, 2.3.7, 2.4.5, and 2.5.2 contain a non-exploitable multi-factor authentication weakness. Superusers…
CVE-2022-50485USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode There are many places that will get unhappy (and…
CVE-2026-53092US——
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and dst…
04

attack patterns (10)

CAPEC attack patterns that exploit this.

05

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan