CWE-322 – Key Exchange without Entity Authentication
Description The software performs a key exchange with an actor without verifying the identity of that actor. Performing a key exchange will preserve the integrity...
Description The software performs a key exchange with an actor without verifying the identity of that actor. Performing a key exchange will preserve the integrity...