CWE-287: Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Also known as authentification, AuthN, AuthC.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows admin centerWindows Admin Center Elevation of Privilege Vulnerability7.8 High
- microsoft windows admin centerWindows Admin Center Information Disclosure Vulnerability6.5 Medium
- microsoft windows admin centerWindows Admin Center Elevation of Privilege Vulnerability8.1 High
- microsoft azure spring apps, azure spring cloud +1 moreAzure Spring Apps Elevation of Privilege Vulnerability8.2 High
- kimaiKimai: Two-factor authentication bypass on the Kimai API7.1 High
facturascripts/facturascriptsPackagistFacturaScripts: Account takeover of any 2FA-enabled user9.3 Critical- apolloconfig apolloApollo ConfigService access key authentication bypass via raw config file appId parsing7.5 High
- apolloconfig apolloApollo ConfigService access key authentication bypass via appId parsing and non-canonical matching7.5 High
- decidimDecidim: JWT-backed authentication can be replayed across organizations8.5 High
- waooai waoowaoowaooAI waoowaoo Internal Task Header api-auth.ts requireProjectAuthLight improper authentication6.9 Medium
- evbee dc-80Missing authentication for Bluetooth communication8.7 High
- will-moss isaiahwill-moss Isaiah Websocket Connection Authentication main.go improper authentication6.9 Medium
- rafymrx toko-online-rotiRafyMrX TOKO-ONLINE-ROTI missing authentication6.9 Medium
github.com/almeidapaulopt/tsdproxyGoTSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation9.0 Critical- cyberlord92 miniorange social login and register (discord, google, twitter, linkedin)miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow9.8 Critical
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks6.8 Medium
- logto-io logtoLogto: Account Center MFA management step-up bypass via WebAuthn registration verification8.1 High
- prowlerAccount pre-hijacking in the Prowler API through email based social account linking without verification7.6 High
- prowlerProwler: SAML Domain Claiming Enables Cross-Tenant Account Takeover9.6 Critical
- zitadelZITADEL: Auto-linking by email: IdP-side email verification is not checked4.8 Medium
- decolua 9router9router: Reverse proxy locality collapse allows unauthenticated access to 9router /v1 APIs8.3 High
- cap-go capgoCapgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint6.9 Medium
- loginpress proLoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback8.1 High
- loginpress proLoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback8.1 High
- loginpress proLoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)8.0 High
- mettle sendportalmettle sendportal APIv1 Webhooks mailjet missing authentication6.9 Medium
- n8nn8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution7.6 High
- linuxfoundation nats-serverNATS Server: Route API Auth Bypass8.8 High
- berriai litellmLiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback8.8 High
- drupal commerce guest registrationCommerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-0799.1 Critical
- drupal clean restfulClean RESTful - Critical - Unsupported - SA-CONTRIB-2026-0785.9 Medium
- portainerPortainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances7.1 High
- dassault systèmes delmia aprisoImproper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 20269.8 Critical
flask-security-tooPyPIFlask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion5.3 Medium- better-auth better auth, better-auth +1 moreBetter Auth: Account takeover via OAuth auto-link to unverified pre-registered email8.3 High
- better-auth better auth, better-auth +1 moreBetter Auth: Unauthorized invitation acceptance via unverified email match in organization plugin7.7 High
- better-auth, better-auth better auth +1 moreBetter Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins9.1 Critical
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...9.8 Critical
- No product listedFire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4 is vulnerable to Improper Authentication...9.8 Critical
- No product listedTrueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability...9.8 Critical
- coderCoder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass7.4 High
- coderCoder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking7.4 High
- genetec inc. security centerA flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14...7.5 High
- beyondtrust privileged remote access, remote support +1 moreCritical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access9.2 Critical
- beyondtrust privileged remote access, remote support +1 moreCritical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access9.2 Critical
- apache camel, apache software foundation camel keycloak +1 moreApache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null…9.8 Critical
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication6.3 Medium
- hestiacpHestiaCP Admin Takeover8.3 High
- Show moreLoading…