CWE-655
Insufficient Psychological Acceptability
Description
The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.
Parent Weaknesses (ChildOf)
Common Consequences
Scope
Impact
Bypass Protection Mechanism
Potential Mitigations
Where possible, perform human factors and usability studies to identify where your product's security mechanisms are difficult to use, and why.
Make the security mechanism as seamless as possible, while also providing the user with sufficient details when a security decision produces unexpected results.
Applicable Platforms
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now