When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.

The product modifies the SSL context after connection creation has begun.