Weakness (CWE)
CWE-287: Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
How to prevent it (1 mitigation)
-
Architecture and Design
Use an authentication framework or library such as the OWASP ESAPI Authentication feature.
Source: MITRE CWE-287
3,178 results · Feed
-
Medium 5.9
Validation Bypass in paypal-ipn
paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool…
-
Critical 9.8
Authentication Bypass in hapi-auth-jwt2
When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
-
Unscored —
In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authenti…
-
Unscored —
A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticate…
-
Medium 4.3
Improper Authentication in Jenkins
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).
-
Critical 9.8
An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on T…
-
Critical 9.8
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?image…
KEV Mar 31, 2022 -
Unscored —
A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access …
-
Unscored —
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an au…
-
High 8.0
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthent…
-
Unscored —
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privil…
-
Unscored —
A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director …
-
Medium 4.8
Incorrect Authorization in Undertow
undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker t…
-
High 8.1
Moodle Improper Authentication
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.
-
Unscored —
X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canoni…
-
Unscored —
A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthe…
-
Unscored —
A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API autho…
-
Unscored —
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not…
-
Unscored —
Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2…
-
Unscored —
GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default o…
-
Unscored —
GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use …
-
Unscored —
GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credent…
-
Unscored —
GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or ha…
-
Critical 9.8
Paramiko not properly checking authentication before processing other requests
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…
-
Critical 9.8
AsyncSSH SSH Server Authentication Bypass
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
-
Unscored —
curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-201…
-
Unscored —
A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote atta…
-
Medium 6.5
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.
-
Unscored —
A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controlle…
-
Unscored —
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An a…
-
Unscored —CVE-2018-1163 EPSS 16%
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backu…
-
Unscored —
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attack…
-
High 8.8
Improper Authentication in Jenkins
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The `login` command available in the remoting-based CLI stored the encrypted user name of the successfully auth…
-
Unscored —
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleCont…
-
Unscored —
A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged…
-
Unscored —
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison …
-
High 7.5
OXID eShop user impersonation vulnerability
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
-
Unscored —
An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Su…
-
High 8.1
Disabled users able to log in with third party SSO plugin
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
-
High 8.1
pysaml2 Improper Authentication vulnerability
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.