CWE-345 - Insufficient Verification of Data Authenticity