CVE-2023-42793

Mandates additional authentication for access under defined conditions, ensuring critical or high-risk functions are not left without authentication.

Identity providers mandate authentication for functions that would otherwise lack it.

Requires authentication for non-organizational users, preventing access to critical functions without proper identification and authentication.

Requires established identification and authentication to unlock, mitigating missing authentication for continued system access.

Requiring identification and rationale for actions allowed without authentication ensures critical functions are not left unprotected by forcing review of authentication requirements.

Authorizing remote access reduces the ability to bypass authentication via unauthorized alternate remote channels.

Authorizing mobile device connections to organizational systems ensures authentication is performed for this critical access function.

Guarantees critical functions are protected by mandatory invocation of the access control mechanism.

Managing identities and credentials is a prerequisite for authentication but does not itself enforce it on critical functions.

Access control policy directly addresses alternate authentication paths by requiring all channels to enforce authentication.

Authentication information management ensures credentials and mechanisms are consistently applied across all access paths.

Access rights provisioning and review prevent bypass via unmonitored or alternate channels.

Mandating authentication requirements for critical functions at the requirements-gathering stage ensures that essential operations are not left unprotected by missing login or verification mechanisms.