CWE-288: Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
A kind of CWE-306 Missing Authentication for Critical Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- moxa awk-3131a firmware, moxa +1 moreAn exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa...8.0 High
- microsoft windows server, windows 10, windows server 2019 +1 more +3 moreMicrosoft Windows RDP can bypass the Windows lock screen5.3 Medium
- gitlab, gitlab ce/ee +1 moreA authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in...8.8 High
- abb plant connect, power generation information manager +1 moreIn all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the...9.8 Critical
- dell rsa archer, rsa archer +1 moreRSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability....8.1 High
- gitlabAn authentication issue was discovered in GitLab that allowed a bypass of email verification....7.2 High
- datalogic av7000 firmwareDatalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to...8.8 High
- nextcloud com.nextcloud.client, server +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the...4.6 Medium
- nextcloud, nextcloud com.nextcloud.client +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to...6.1 Medium
- nextcloud, nextcloud com.nextcloud.client +1 moreBypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and...6.8 Medium
- suse rancherAccess Control Bypass8.8 High
- ics-cert pangea communications internet fax ata, pangea-comm fax ata +1 morePangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass...7.5 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an...5.3 Medium
- unknown circontrol circarlife all versions prior to 4.3.1, circontrol circarlife firmware +1 moreCircontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed...9.8 Critical
- mobyproject mobyDocker Authentication Bypass7.5 High
- echelon i.lon 100, i.lon 600, smartserver 1 +5 more +7 moreEchelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON...9.8 Critical
- navarino infinitySome Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak7.5 High
- hughes satellite modem dw7000, hn7000s/sm, hn7740s +4 more +6 moreHughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel8.8 High
- siemens siclock tc100 firmware, siclock tc400 firmware, siemens ag siclock tc100, siclock tc400 +2 moreA vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All...9.8 Critical
- gluster glusterfs, debian linux +1 moreglusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster...6.6 Medium
- siemens 7kt pac1200 data manager firmwareA vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions...9.8 Critical
- siemens simatic wincc sm\@rtclient, simatic wincc sm\@rtclient lite +1 moreA vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions...5.4 Medium
- geutebruck ip camera g-cam efd-2250 firmwareAn Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11...9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Critical
- moodleMoodle Authentication Bypass in Question-Bank4.0 Medium
- ibm websphere application server, vmware springsource spring security, acegisecurity acegi-security +2 moreAuthentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security5.0 Medium