CWE-302
Overview
- CWE ID
- 302
- CWE Name
- Authentication Bypass by Assumed-Immutable Data
- CWE Abstraction
- Variant
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.