CWE-603: Use of Client-Side Authentication
A client/server product performs authentication within client code but not in server code, allowing server-side authentication to be bypassed via a modified client that omits the authentication check.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- zakład ubezpieczeń społecznych płatnik Use of Client-Side Authentication in Płatnik 8.6 High
- hayat health facilities inc. (hayat hospital) mobile OTP Code Exposure in Hayat Hospital's Hayat Mobile 8.2 High
- wso2 api control plane, api manager +1 more Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft 4.7 Medium
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu8, skype for business server subscription edition cu1 +2 more +4 more Skype for Business Spoofing Vulnerability 7.1 High
- ebyte ne2-d11 firmware Ebyte NE2-D11 Use of Client-Side Authentication 8.7 High
- ebyte na111-m firmware Ebyte NA111-M Use of Client-Side Authentication 9.3 Critical
- sparx systems enterprise architect Authorization Bypass in Sparx Enterprise Architect 8.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulation 4.3 Medium
- binsoft mpcrm, mpfaktura, mpfirma +5 more +7 more Use of Client-Side Authentication in multiple BinSoft products 8.4 High
- cgm clininet Session generation possible with certificate number only 9.0 Critical
- jnc i6, iaqs +1 more JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security 9.3 Critical
- nuvation energy battery management system Nuvation Energy BMS Client-side Authentication 9.3 Critical
- mirion medical ec2 software nmis biodose, mirion biodose\/nmis +1 more Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication 8.7 High
- cybertutor new site server CyberTutor｜New Site Server - Use of Client-Side Authentication 9.3 Critical
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 more The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client... 8.3 High
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 more The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client... 5.8 Medium
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001) Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions... 7.5 High
- ecovacs cloud service, home +1 more ECOVACS lawnmower and vacuum cloud service live video PIN bypass 6.0 Medium
- neumann musasi MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability... 7.5 High
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-dh (exciter+amplifiers) fm transmitters +1 more +3 more Use of Client-Side Authentication in TELSAT marKoni FM Transmitter 9.3 Critical
- flipsnack An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via... 7.5 High
- solarwinds security event manager, sem +1 more Client-Side Desync Vulnerability 6.1 Medium
- necta llc wifi mouse (mouse server), necta wifi mouse server +1 more Necta WiFi Mouse (Mouse Server) client-side authentication bypass 9.8 Critical
- siemens cerberus dms, desigo cc, desigo cc compact +4 more +6 more A vulnerability has been identified in SIMATIC WinCC OA V3.16 (All versions in default... 9.8 Critical
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 more Fresenius Kabi Agilia Connect Infusion System use of client side authentication 7.3 High
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 more In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control... 6.5 Medium
- siemens siport mp A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of... 8.8 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 more Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all... 7.5 High
- advantech b\+b smartworx mesr901 firmware A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901... 9.8 Critical