CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- arbiter 1094b gps substation clock, arbiter systems model 1094b gps substation clock +1 moreArbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity5.4
- malwarebytes anti-exploit, anti-malware +1 moreThe upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and...9.3 High
- lwip project lwipresolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier,...4.3 Medium
- asus rt series firmware, t-mobile tm-ac1900 +1 moreASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and...7.1 High
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...4.0 Medium
- igniterealtime smackThe ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify...5.0 Medium
- kay framework project framework, openid openid4java, redhat jboss enterprise application platform +2 moreOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 Medium