CWE-1390: Weak Authentication
The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- emlog pro, gotenna pro app +1 moreWeak Authentication in goTenna Pro6.0 Medium
- ivanti endpoint managerWeak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September...4.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Kerberos Elevation of Privilege Vulnerability7.2 High
- microsoft dynamics 365, dynamics 365 field service (on-premises) v7 series +1 moreMicrosoft Dynamics 365 Elevation of Privilege Vulnerability9.0 Critical
- nsoftware ipworks ssh, /n software ipworks ssh sftpserver +1 more/n software IPWorks SSH insufficient file access verification2.3 Low
- internet2 grouperInternet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in...9.1 Critical
- talya informatics elektrawebImproper Access Control in Talya Informatics' Elektraweb9.8 Critical
- ghostGhost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection...9.1 Critical
- redhat quay, red hat quay 3 +1 moreQuay: unauthorized user may authenticate via oauth application token4.2 Medium
- microsoft dynamics 365 business central, dynamics 365 business central 2023 release wave 1, dynamics 365 business central 2023 release wave 2 +1 more +3 moreMicrosoft Dynamics 365 Business Central Elevation of Privilege Vulnerability7.3 High
- netgear wnr614 firmwareAn issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass...8.8 High
- tpm2-software tpm2-toolstpm2 does not detect if quote was not generated by TPM4.3 Medium
- cs technologies australia evolution controller, cs-technologies evolution +1 morePoor session management in Evolution Controller allows administrator functionality for unauthenticated connections8.8 High
- newlandemea nquire 1000 mantaAn issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011,...9.8 Critical
- ovirt ovirt-engine, red hat virtualization engine 4.4 +1 moreOvirt: authentication bypass7.5 High
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-0039.8 Critical
- fujitsu arconte áurea, arconte aurea +1 moreWeak authentication vulnerability in Fujitsu Arconte Áurea6.5 Medium
- sap commerce cloud, sap se commerce, sap commerce hycom +2 moreSAP Commerce accepts empty passphrases.8.8 High
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty's OpenId Revoked authentication allows one request3.5 Low
- fortinet fortinac, fortinac-f +1 moreA weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4...5.0 Medium
- microsoft onedrive, onedrive for ios +1 moreMicrosoft OneDrive for iOS Security Feature Bypass Vulnerability6.5 Medium
- siemens siveillance video mobile server v2022 r2, siveillance video mobile server +1 moreA vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions <...9.8 Critical
- microsoft open management infrastructure, azure automation state configuration, dsc extension, azure automation update management +12 more +14 moreOpen Management Infrastructure Elevation of Privilege Vulnerability7.8 High
- microsoft open management infrastructure, open management infrastructure (omi), azure automation state configuration, dsc extension +11 more +13 moreOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability9.8 Critical