Extended Description
Enforce the use of strong mutual authentication mechanism between the two parties.
Whenever a product is an intermediary or proxy for transactions between two other components, the proxy core should not drop the identity of the initiator of the transaction. The immutability of the identity of the initiator must be maintained and should be forwarded all the way to the target.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description
If exploited, CWE-441 (Unintended Proxy or Intermediary ('Confused Deputy')) it can compromise Gain Privileges or Assume Identity, Hide Activities and Execute Unauthorized Code or Commands, leading to outcomes such as Scope: Non-Repudiation and Access Control.
Recommended mitigations for CWE-441 include: Enforce the use of strong mutual authentication mechanism between the two parties. Whenever a product is an intermediary or proxy for transactions between two other components, the proxy core should not drop the identity of the initiator of the transaction. The immutability of the identity of the initiator must be maintained and should be forwarded all the way to the target.
CWE-441 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-441 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.