Weakness (CWE)
CWE-287: Improper Authentication
Class Draft Mapping discouraged
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
How to prevent it (1 mitigation)
-
Architecture and Design
Use an authentication framework or library such as the OWASP ESAPI Authentication feature.
Source: MITRE CWE-287
1,204 results · Clear filters · Feed
-
High 8.1
Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover
## Preface Poweradmin maps OIDC identities into local users through `oidc_user_links.oidc_subject` plus `provider_id`. In the MySQL schema, the OIDC link table explicitly uses `utf8mb4_unicode_ci`, which is case-insensitive and accent-insensitive. OIDC `sub` …
-
High 8.4
Loytec LINX firmware: Improper Authentication in PAM configuration
Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root sh…
-
High 7.5
MFA Bypass in MOVEit Transfer
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
-
High 7.5
Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa
The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without t…
-
High 8.1
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp…
-
High 8.8
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Suppo…
-
High 8.8
Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). Suppor…
-
High 8.8
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Sup…
-
High 7.5
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported v…
-
High 8.8
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). …
-
High 8.8
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations…
-
High 8.8
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers…
-
High 8.8
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versi…
-
High 8.8
Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions …
-
High 8.8
Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported ver…
-
High 8.8
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
High 8.8
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffi…
-
High 8.1
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Co…
-
High 7.5
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: I…
-
High 8.8
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…
-
High 8.8
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…
-
High 8.8
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …
-
High 8.1
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
High 8.8
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
High 8.1
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The…
-
High 8.8
Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solu…
-
High 8.8
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions th…
-
High 8.8
Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported version…
-
High 8.8
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…
-
High 8.8
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…
-
High 8.1
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurem…
-
High 8.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…
-
High 7.1
Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). …
-
High 8.8
Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Opera…
-
High 8.8
Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations…
-
High 8.8
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Sup…
-
High 7.5
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations…
-
High 7.5
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations…
-
High 8.8
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). …