Statements (13)
Predicate | Object |
---|---|
gptkbp:instance_of |
gptkb:Common_Weakness_Enumeration
|
gptkbp:bfsLayer |
6
|
gptkbp:bfsParent |
gptkb:CWE-23
|
gptkbp:category |
Access Control
|
gptkbp:difficulty |
gptkb:High
|
gptkbp:example |
A web application that allows users to perform administrative actions without logging in.
|
https://www.w3.org/2000/01/rdf-schema#label |
CWE-889
|
gptkbp:impact |
Unauthorized access to critical functions.
|
gptkbp:is_described_as |
The software does not perform any authentication checks for critical functions.
|
gptkbp:is_protected_by |
Implement authentication checks for all critical functions.
|
gptkbp:name |
Missing Authentication for Critical Function
|
gptkbp:related_to |
gptkb:software
Authentication |