CWE-654
Reliance on a Single Factor in a Security Decision
AI Translation Available
A protection mechanism relies exclusively, or to a large extent, on the evaluation of a single condition or the integrity of a single object or entity in order to make a decision about granting access to restricted resources or functionality.
Status
draft
Abstraction
base
Affected Platforms
Technical Details
AI Translation
Common Consequences
access control
non-repudiation
Impacts
gain privileges or assume identity
hide activities
Potential Mitigations
Phases:
architecture and design
Descriptions:
•
Use redundant access rules on different choke points (e.g., firewalls).
•
Use multiple simultaneous checks before granting access to critical operations or granting critical privileges. A weaker but helpful mitigation is to use several successive checks (multiple layers of security).