Weakness (CWE)
CWE-592: DEPRECATED: Authentication Bypass Issues
Class Deprecated Mapping prohibited
This weakness has been deprecated because it covered redundant concepts already described in CWE-287.
Source: MITRE CWE-592
6 results · Clear filters · Feed
-
Medium 6.8
Gaia unauthenticated endpoints
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.
-
Medium 6.3
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplent…
-
Medium 6.5
An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were sea…
-
Medium 4.2
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtu…
-
Medium 4.1
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If a…
-
Medium 5.9
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the p…