CWE-305: Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login 8.1 High
- apache software foundation qpid proton c Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames 9.8 Critical
- bmc control-m/enterprise manager, control-m/server +1 more Remote unauthenticated information disclosure and denial of service due to unauthenticated service access 6.9 Medium
- videowhisper.com 2way videocalls and random chat WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability 6.5 Medium
- bmc helix network management BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration 9.5 Critical
- nginxui nginx ui, 0xjacky nginx-ui +1 more Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass) 8.1 High
- gitea Gitea built-in SSH server authentication bypass through key case folding 9.1 Critical
- apache software foundation mina sshd Apache MINA SSHD: Asynchronous authentication can bypass signature verification 9.1 Critical
- apache software foundation mina sshd Apache MINA SSHD: LDAP injection in sshd-ldap 9.1 Critical
- zscaler zscaler-mcp-server HMAC Confirmation Token Unbinding in zscaler-mcp-server 4.6 Medium
- red hat hardened images Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication 6.5 Medium
- team-alembic ash authentication `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication 9.1 Critical
- n-able n-central Authentication bypass leads to unauthorised access to N-central 7.7 High
- papercut mf/ng, mf, ng +1 more +3 more PaperCut MF/NG: Authentication Bypass 8.8 High
- rapid7 metasploit-framework Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails 5.1 Medium
- No product listed Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically 9.8 Critical
- apache hive Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user 7.4 High
- vsdesk Admin Account Takeover via Path Traversal in vsDesk 9.3 Critical
-
lemonldap-ngDebian Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO sessio… 9.8 Critical - cityboss e-municipality Register Bypass in Universal Sotware's E-Municipality 5.3 Medium
- silabs.com wiseconnect Bypassing passkey entry in legacy pairing 7.6 High
- silabs.com wiseconnect Bluetooth re-pairing with legitimate device can use lower security level 8.8 High
- xen sysctl and platform-op locks open to abuse 8.8 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption 4.3 Medium
- mattermost, mattermost server +1 more Deactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpoint 5.4 Medium
- mattermost, mattermost server +1 more Deactivated user accounts can continue to obtain valid OAuth access tokens via refresh token grant in Mattermost 5.9 Medium
- dell 14 plus 2-in-1 db04250, 14 plus db14250, 15 dc15250 +227 more +229 more Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An... 5.3 Medium
- bmc control-m/server Unauthenticated command injection in Control-M/Server communication command 9.5 Critical
- suse rancher Rancher Privilege Escalation from Project Owner to Host 9.4 Critical
- curl incomplete mTLS config matching in conn reuse 7.5 High
- safeline sl6/sl6+ Authentication Bypass for SafeLine SL6 and SL6+ 8.7 High
- abb freelance Freelance Security Lock – Access to Windows OS 5.6 Medium
- openbullet openbullet2 OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header 9.3 Critical
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: brute-force protection bypass in ciba flow 4.3 Medium
- devolutions server Improper handling of factor key state in the multi-factor authentication management feature in... 7.6 High
- suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 more Missing exit out of permission check in haveged could lead to root exploit 7.8 High
- mattermost, mattermost server +1 more OAuth authorization code client binding not enforced during token redemption in Mattermost 3.1 Low
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Authentication Bypass in mlflow/mlflow 8.6 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +1 more +3 more Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking 8.3 High
- progress moveit automation Improper Authentication vulnerability in Progress MOVEit Automation 9.8 Critical
- curl wrong reuse of HTTP Negotiate connection 6.5 Medium
- spring boot, vmware spring boot, red hat amq broker 7 +14 more +16 more Spring Boot's default security filter chain has no authorization rule with Actuator but without Health 9.1 Critical
- churchcrm crm ChurchCRM: Authentication Bypass in `/api/public/user/login` Allows Bypass of 2FA and Account Lockout 9.1 Critical
- cryptomator Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass) 4.8 Medium
- cisco secure web appliance Cisco Secure Web Appliance Authentication Service Traffic Bypass Vulnerability 5.3 Medium
- siemens industrial edge management pro v1, industrial edge management pro v2, industrial edge management virtual +2 more A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 ... 5.1 Medium
- pachno Pachno 1.0.6 Open Redirection via return_to Parameter 7.1 High
- isc bind, bind 9 +1 more A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass 5.4 Medium
- mantisbt MantisBT SOAP API has an authentication bypass vulnerability on MySQL 9.3 Critical
- ory oathkeeper Ory Oathkeeper has an authentication bypass by cache key confusion 8.1 High
- Show olderLoading…