Improper Authentication (CWE-287) - Security Vulnerability

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Authentication is the process of determining if a claimed identity is correct. When authentication is insufficient or incorrect, attackers can assume the identity of legitimate users.

Prévalence

Élevée

Fréquemment exploitée

Impact

Critique

2 règles de sévérité critique

Prévention

Documentée

2 exemples de correctifs

2 Prévention

Comment corriger cette vulnérabilité

Stratégies de prévention pour Improper Authentication basées sur 2 règles de détection Shoulder.

🟨 JavaScript Tout voir JavaScript détails →

JWT Decode Used for User Identity (Authentication Bypass) CRITICAL

Use jwt.verify() instead of jwt.decode() when assigning user identity

+3 -1 javascript

- const decoded = jwt.decode(token);
+ const decoded = jwt.verify(token, process.env.JWT_SECRET, {
+   algorithms: ['HS256']
+ });
  req.user = decoded;

🐍 Python Tout voir Python détails →

Authentication Bypass Vulnerability CRITICAL

Use early returns for authentication failures and constant-time comparison

+8 -7 python

  from flask import request, jsonify
- 
- @app.route('/login', methods=['POST'])
- def login():
-     user = User.query.filter_by(username=request.json['username']).first()
-     if user and user.password == request.json['password']:
-         return jsonify({'token': generate_token(user)})
-     return jsonify({'error': 'Invalid'}), 401
+ from werkzeug.security import check_password_hash
+ 
+ @app.route('/login', methods=['POST'])
+ def login():
+     user = User.query.filter_by(username=request.json['username']).first()
+     if not user or not check_password_hash(user.password_hash, request.json['password']):
+         return jsonify({'error': 'Invalid credentials'}), 401
+     return jsonify({'token': generate_token(user)})

3 Détection

Trouvez les vulnérabilités dans votre code

Utilisez Shoulder pour scanner votre code à la recherche de patterns Improper Authentication. 2 règles.

terminal

# Scan with Shoulder CLI
npx @shoulderdev/cli trust --cwe=287

# Or scan entire project
npx @shoulderdev/cli trust .

Règles de Détection (2)

🟨 Javascript 1 rules

JWT Decode Used for User Identity (Authentication Bypass) CRITICAL

Detects when jwt.decode() output is used for user identity, allowing complete authentication bypass since decode() does not verify signatures.

🔷 Typescript 1 rules

JWT Decode Used for User Identity (Authentication Bypass) CRITICAL

Detects when jwt.decode() output is used for user identity, allowing complete authentication bypass since decode() does not verify signatures.

🐍 Python 1 rules

Authentication Bypass Vulnerability CRITICAL

Detects authentication checks that can be bypassed due to missing return statements or weak boolean logic.

4 Signes d'Alerte

Ce qu'il faut surveiller lors des revues de code

Ces patterns indiquent des vulnérabilités potentielles Improper Authentication. Recherchez-les lors des revues de code et des audits de sécurité.

🔴

when jwt javascript-jwt-unverified-user-identity

🔴

authentication checks that can be bypassed due to missing return statements or weak boolean logic python-authentication-bypass

🔍

Scannez votre base de code pour Improper Authentication

Shoulder CLI trouve les motifs vulnérables dans toute votre base de code.

npx shoulder trust Parcourir toutes les règles