Skip to content
OpenAdvisories

Weakness (CWE)

CWE-302: Authentication Bypass by Assumed-Immutable Data

Base Incomplete

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

How to prevent it (1 mitigation)

  1. Architecture and Design, Operation, Implementation

    Implement proper protection for immutable data (e.g. environment variable, hidden form fields, etc.)

Source: MITRE CWE-302

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-84731

    Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

    An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the applica…

    Nutanix Acropolis Operating System (AOS)
  • Critical 9.9
    CVE-2026-61682

    kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

    kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.31.4 and 0.32.2, the kcp front-proxy does not remove inbound X-Remote-User, X-Remote-Group, or X-Remote-Extra-* identity headers before…

    kcp-dev kcp github.com/kcp-dev/kcp Go
  • Critical 9.9
    CVE-2026-48781

    Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery

    Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWT_SECRET, and the auth middleware trusted every claim in that …

    gitroomhq postiz-app
  • Critical 9.8
    CVE-2025-63210

    The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authenti…

  • Critical 9.0
    CVE-2025-47158

    Azure DevOps Server Elevation of Privilege Vulnerability

    Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure DevOps
  • Critical 10.0
    CVE-2025-29813

    Azure DevOps Elevation of Privilege Vulnerability

    Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure DevOps
  • Critical 9.9
    CVE-2024-56404

    In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privil…

    One Identity Identity Manager
  • Critical 9.8
    CVE-2024-43441 Scanner template EPSS 73%

    Apache HugeGraph-Server: Fixed JWT Token(Secret)

    Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

    Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-server Maven
  • Critical 9.8
    CVE-2023-4612

    MFA bypass in Apereo CAS

    Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fi…

    Apereo cas
  • Critical 9.8
    CVE-2023-4669

    Authentication Bypass in Exagate SYSGuard 3001

    Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0.

    Exagate SYSGuard 3001