CWE-649: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
The product uses obfuscation or encryption of inputs that should not be mutable by an external actor, but the product does not use integrity checks to detect if those inputs have been modified.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- danielberkompas cloak Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping 8.2 High
- zitadel ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens 8.7 High
- funambol cloud server Weak encryption on Funambol's cloud server 6.0 Medium
- fossasia open-event-server fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking 6.3 Medium
- sick ag inspectorp61x, inspectorp62x, sick inspector61x firmware +1 more +3 more SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification 8.8 High
- freefrom k.k. "freefrom - the nostr client" app for android, "freefrom - the nostr client" app for ios, freefrom kk the nostr client app +2 more Reliance on obfuscation or encryption of security-relevant inputs without integrity checking... 5.3 Medium
- owasp enterprise security api for java Padding oracle attacks 5.9 Medium
- dell bsafe micro-edition-suite, rsa bsafe mes +1 more RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and... 5.9 Medium