CWE-1390: Weak Authentication
The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- qnap qurouterQuRouter4.0 Medium
- unitycatalogUnity Catalog has a JWT Issuer Validation Bypass Allows Complete User Impersonation9.1 Critical
- acronis cyber protect 17, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authentication. The following...8.1 High
- jrsoftware inno setupPrivilege escalation via dll hijacking in Inno Setup5.7 Medium
- arcinfo pcvueUse of vulnerable Resource Owner Password Credentials flow5.3 Medium
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...10.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...10.0 Critical
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 51.3 Low
- solarwinds web help deskSolarWinds Web Help Desk Authentication Bypass Vulnerability9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Authentication Bypass Vulnerability9.8 Critical
- dulldusk phpfm, phpfilemanager +1 morephpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability9.3 Critical
- 2dogz bloginAn issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit...9.8 Critical
- aenrich a+hrd, a\+hrd +1 moreaEnrich｜a+HRD - Authentication Abuse9.3 Critical
- aenrich a+hrd, a\+hrd +1 moreaEnrich｜eHRD - Authentication Abuse9.3 Critical
- rockwell automation factorytalk® datamosaix™ private cloudFactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass7.6 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.8 High
- fortinet fortipam, fortiswitchmanager +1 moreA weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0...7.4 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed through improved state management. This issue is fixed in iOS 26 and...6.5 Medium
- microsoft multimedia redirection installer, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft azure machine learningAzure Machine Learning Elevation of Privilege Vulnerability6.5 Medium
- end-of-train and head-of-train remote linking protocol and head-of-train remote linking protocolEnd-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication7.2 High
- microsoft asp.net core, asp.net core 6.0, microsoft.aspnetcore.app.runtime.linux-arm +12 more +14 moreEOL ASP.NET Core Elevation of Privilege Vulnerability7.0 High
- aresit wp compressWordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability5.3 Medium
- sinotrack iot pc platformSinoTrack GPS Receiver Weak Authentication7.6 High
- fortinet forticlientemsAn improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and...4.6 Medium
- gitlabWeak Authentication in GitLab4.6 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials9.8 Critical
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there...6.5 Medium
- quentn.com gmbh quentn wpWordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability9.8 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Hello Security Feature Bypass Vulnerability6.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreActive Directory Certificate Services Elevation of Privilege Vulnerability8.8 High
- siemens industrial edge device kit - arm64 v1.17, industrial edge device kit - arm64 v1.18, industrial edge device kit - arm64 v1.19 +16 more +18 moreA vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions),...9.3 Critical
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +240 more +242 moreWeak Authentication in HLOS6.2 Medium
- yubico yubikeyYubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol...2.2 Low
- rising technosoft cap back office applicationImproper Authentication Vulnerability in CAP back office application8.2 High
- microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 moreASP.NET Core and Visual Studio Elevation of Privilege Vulnerability7.0 High
- hashicorp hermes, tooling +1 moreHashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass8.2 High
- dell client platform bios, alienware m15 r6 firmware, alienware m15 r7 firmware +390 more +392 moreDell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged...8.2 High
- learning digital orca hcmLearning Digital Orca HCM - Improper Authentication9.8 Critical
- q-free maxtimeA CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than...8.1 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface8.8 High
- oracle jd edwards enterpriseone orchestratorVulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards ...6.5 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1,...6.7 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0...8.0 High
- drupal email tfa, email tfa project tfa +1 moreEmail TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-0018.8 High
- fxc inc. ae1021, ae1021pe +1 moreWeak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE...7.5 High
- guido vs contact formWordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability5.3 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreActive Directory Certificate Services Elevation of Privilege Vulnerability7.8 High
- optigo networks ons-s8 spectra aggregation switch, optigo ons-s8 firmware +1 moreOptigo Networks ONS-S8 Spectra Aggregation Switch Weak Authentication9.3 Critical
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Weak Authentication6.0 Medium
- Show moreLoading…