Common Weakness Enumeration

    CWE Definition / CWE-301

    CWE-301: Reflection Attack in an Authentication Protocol

    Simple authentication protocols are subject to reflection attacks if a malicious user can use the target machine to impersonate a trusted user.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-1390: Weak Authentication

    CWE-327: Use of a Broken or Risky Cryptographic Algorithm