Skip to content
OpenAdvisories

Weakness (CWE)

CWE-592: DEPRECATED: Authentication Bypass Issues

Class Deprecated Mapping prohibited

This weakness has been deprecated because it covered redundant concepts already described in CWE-287.

Source: MITRE CWE-592

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-43512 Public exploit

    Apache Tomcat: Digest authenticator will authenticate any unknown user

    DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from…

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Critical 9.3
    CVE-2019-14910

    Keycloak Authentication Error

    A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.

    org.keycloak:keycloak-parent Maven
  • Critical 9.3
    CVE-2019-14909

    Keycloak Authentication Error

    A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.

    org.keycloak:keycloak-parent Maven
  • Critical 9.1
    CVE-2018-10933 Public exploit EPSS 92%

    A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client cou…

    [UNKNOWN] libssh libssh libssh Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-14643

    smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

    An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.

    [UNKNOWN] smart_proxy_dynflow smart_proxy_dynflow RubyGems
  • Critical 9.0
    CVE-2018-1085

    openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certifica…

    [UNKNOWN] openshift-ansible