CWE-276

GPTKB entity

Statements (14)
Predicate Object
gptkbp:instance_of gptkb:Common_Weakness_Enumeration
gptkbp:bfsLayer 6
gptkbp:bfsParent gptkb:CWE-23
gptkb:CWE-744
gptkbp:category Access Control Issues
gptkbp:difficulty gptkb:High
gptkbp:example A web application that allows users to access admin functions without logging in.
https://www.w3.org/2000/01/rdf-schema#label CWE-276
gptkbp:impact Unauthorized access to sensitive functions.
gptkbp:is_described_as The software does not perform any authentication checks for critical functions.
gptkbp:is_protected_by Implement proper authentication mechanisms.
gptkbp:is_referenced_in https://cwe.mitre.org/data/definitions/276.html
gptkbp:name Missing Authentication for Critical Function
gptkbp:related_to CWE-287