CWE-304: Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.
A kind of CWE-303 Incorrect Implementation of Authentication Algorithm.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains hub In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the... 6.8 Medium
- frrouting frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses 6.1 Medium
- zohocorp manageengine key manager plus Authentication bypass vulnerability 7.7 High
- implem inc. pleasanter Pleasanter provided fails to properly verify passwords in LDAP authentication when processing... 6.9 Medium
- apache software foundation tomcat Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms 9.1 Critical
- progress moveit transfer MOVEit Transfer Authentication bypass in LDAP sign-on 8.1 High
- gitea Gitea second-factor bypass through OpenID identity linking 8.8 High
- tsplus remote access Improper Multi-Factor Authentication Validation Allows Authentication Bypass 8.7 High
- apache software foundation mina sshd Apache MINA SSHD: Repeated-publickey policy bypass on server 8.1 High
- apache software foundation mina sshd Apache MINA SSHD: LDAP password authentication ineffective 9.1 Critical
- getgrav grav grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authentication Bypass 6.9 Medium
- proxmox server solutions gmbh virtual environment (ve) Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter 9.3 Critical
- zscaler client connector Authentication bypass between ZCC and client connector portal 9.1 Critical
- phpmyfaq phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie 8.6 High
- devpi devpi: Database contents leak 6.5 Medium
- smp46 pingvin-share-x TOTP enrollment hijack: password gate skipped due to unawaited promise 8.8 High
- apache cxf Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation 9.1 Critical
- s9y serendipity Serendipity < 2.6.1 Authentication Bypass via Username Collision 8.7 High
- oracle communications convergent charging controller Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle... 6.4 Medium
- apache software foundation kerby, red hat amq clients, data grid 8 +4 more +6 more Apache Kerby: Kerberos Pre-Authentication Bypass 7.3 High
- apache tomcat Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High
- churchcrm crm ChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.2 9.6 Critical
- termix-ssh termix Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP 8.1 High
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 more Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification 7.3 High
- rocket.chat Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamer 8.0 High
- liferay dxp, digital experience platform +1 more Liferay DXP Missing Critical Step in Authentication 2.1 Low
- tenda ac6 v5.0, ac6 firmware +1 more An unsafe default authentication vulnerability exists in the Initial Setup Authentication... 8.1 High
- latkecrszy linkjoin LinkJoin through 882f196 mishandles token ownership in password reset. 7.4 High
- fortinet fortios, fortiproxy +1 more A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6... 6.8 Medium
- signal app, signal +1 more Signal App Biometric Authentication missing critical step in authentication 1.0 Low
- jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient... 6.1 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 more Authentication Bypass in gaizhenbiao/ChuanhuChatGPT 8.1 High
- superagi, transformeroptimus transformeroptimus/superagi +1 more IDOR Vulnerability in transformeroptimus/superagi 8.8 High
- composio, composiohq composiohq/composio +1 more Authentication Bypass in composiohq/composio 9.8 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 more Missing Authentication Check in parisneo/lollms-webui 8.4 High
- parisneo parisneo/lollms Missing check_access in lollms_binding_infos in parisneo/lollms 8.0 High
- elfatek elektronics anka jpd-00028, elfatek anka jpd00028 firmware +1 more Improper Access Control in Elfatek Elektronics' ANKA JPD-00028 6.9 Medium
- google android, linuxfoundation yocto, mediatek software development kit +1 more +3 more In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID.... 7.5 High
- dell enterprise sonic os, enterprise sonic distribution +1 more Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in... 9.0 Critical
- progress ws ftp server Multi-Factor Authentication Bypass in Progress WS_FTP Server 6.5 Medium
- parisneo lollms-webui, parisneo/lollms, lollms web ui +2 more Missing client_id in parisneo/lollms-webui 4.4 Medium
- ieee 802.11 wireless protocol The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an... 7.4 High
- cyberlord92 malware scanner, miniorange web application firewall, cyberlord92 web application firewall – website security +2 more Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation 9.8 Critical
- line corporation armeria Armeria SAML authentication bypass due to missing validation on unsigned SAML messages 9.1 Critical
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 more Infinispan: non-admins should not be able to get cache config via rest api 4.3 Medium
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 more Infispan: rest bulk ops don't check permissions 6.5 Medium
- palantir foundry, com.palantir.lime:lime2 +1 more Mandatory control bypass in Lime2 7.6 High
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +9 more +11 more Keycloak: session takeover with oidc offline refreshtokens 6.8 Medium
- metabase Metabase SSO users able to circumvent IdP login by doing password reset 6.5 Medium
- wavlink wn531g3, wn531g3 firmware +1 more WAVLINK Quantum D4G (WN531G3) Session Management by IP Address 8.8 High
- Show olderLoading…