CWE-289: Authentication Bypass by Alternate Name
The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
github.com/theupdateframework/go-tufGoGo-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadataNo score- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability9.8 Critical
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealm6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to bypass authentication on vulnerable installations...8.8 High