CWE-322 : Key Exchange without Entity Authentication
The product performs a key exchange with an actor without verifying the identity of that actor.
Related CAPEC definitions
No related CAPEC definitions found
Please note that CWE definitions are provided as a quick reference only.
Visit http://cwe.mitre.org/ for a complete list of CWE entries
and for more details.