Skip to content
OpenAdvisories

Weakness (CWE)

CWE-305: Authentication Bypass by Primary Weakness

Base Draft

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Source: MITRE CWE-305

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-37085 Exploited · Ransomware Public exploit EPSS 27%

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) pe…

    KEV Jul 30, 2024
  • Medium 6.5
    CVE-2020-10923 Public exploit EPSS 85%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…