Skip to content
OpenAdvisories

Weakness (CWE)

CWE-287: Improper Authentication

Class Draft Mapping discouraged

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use an authentication framework or library such as the OWASP ESAPI Authentication feature.

Source: MITRE CWE-287

All Critical High Medium Low Exploited only Public exploit

1,204 results · Clear filters · Feed

  • High —
    CVE-2009-0256

    Authentication library in TYPO3 vulnerable to session fixation

    Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authenticati…

    typo3/cms Packagist
  • High 7.3
    CVE-2007-5614

    Improper Authentication in Mortbay Jetty

    Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

    org.mortbay.jetty:jetty Maven
  • High —
    CVE-2000-1211

    Zope does not properly perform security registration for legacy names

    Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

    zope PyPI
  • High —
    CVE-2000-0062

    Zope DTML implementation Improper Authentication

    The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.

    zope PyPI