CWE-347

Improper Verification of Cryptographic Signature

Base

Draft

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Parent Weaknesses (ChildOf)

Scope

Access Control

Integrity

Confidentiality

Impact

Gain Privileges or Assume Identity, Modify Application Data, Execute Unauthorized Code or Commands

Does not properly verify signatures for "trusted" entities.

Insufficient verification allows spoofing.

Insufficient verification allows spoofing.

Accepts a configuration file without a Message Integrity Check (MIC) signature.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.