CWE-290: Authentication Bypass by Spoofing, page 15

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

What the weakness is: CWE-290 at MITRE

1. 9.8CVE-2022-24112KEVExploitEPSS 96%2022-02-11

   An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was chan…

2. 9.8CVE-2022-23131KEVExploitEPSS 96%2022-01-13

   In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploi…

3. 5.7CVE-2021-42320EPSS 1.6%2021-12-15

   Microsoft SharePoint Server Spoofing Vulnerability

4. 6.5CVE-2021-43807EPSS 1.5%2021-12-14

   Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP method spoofing, allowing to change the assumed HTTP method via URL parameter. This allows attackers to turn HTTP GET r…

5. 7.5CVE-2021-40288EPSS 2.3%2021-12-07

   A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter spe…

6. 3.1CVE-2021-43220EPSS 1.3%2021-11-24

   Microsoft Edge for iOS Spoofing Vulnerability

7. 3.1CVE-2021-42308EPSS 1.3%2021-11-24

   Microsoft Edge (Chromium-based) Spoofing Vulnerability

8. 5.4CVE-2021-41130EPSS 0.4%2021-10-07

   Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP …

9. 5.3CVE-2020-19003EPSS 0.8%2021-10-06

   An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

10. 7.5CVE-2021-41753EPSS 2.4%2021-09-27

    A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authen…

11. 5.9CVE-2021-40824EPSS 0.7%2021-09-13

    A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryptio…

12. 5.9CVE-2021-40823EPSS 0.7%2021-09-13

    A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol mes…

13. 5.3CVE-2020-27970EPSS 1.8%2021-09-13

    Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar

14. 7.1CVE-2021-40867EPSS 1.4%2021-09-13

    Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in (e.g., behind the same NAT …

15. 6.5CVE-2021-30621EPSS 3.5%2021-09-03

    Chromium: CVE-2021-30621 UI Spoofing in Autofill

16. 6.5CVE-2021-30619EPSS 3.5%2021-09-03

    Chromium: CVE-2021-30619 UI Spoofing in Autofill

17. 9.8CVE-2021-34646ExploitEPSS 51%2021-08-30

    Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activ…

18. 5.3CVE-2021-32076EPSS 1.2%2021-08-26

    Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address…

19. 9.1CVE-2021-38598EPSS 1.2%2021-08-23

    OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in cont…

20. 8.3CVE-2021-28372EPSS 2.6%2021-08-17

    ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and …

21. 6.5CVE-2021-32631EPSS 1.1%2021-07-26

    Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a va…

22. 9.8CVE-2020-7388ExploitEPSS 69%2021-07-22

    Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the…

23. 5.7CVE-2021-34466EPSS 0.8%2021-07-16

    Windows Hello Security Feature Bypass Vulnerability

24. 9.1CVE-2021-22779EPSS 1.1%2021-07-14

    Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, in…

25. 7.5CVE-2021-34548EPSS 2.6%2021-06-29

    An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.

26. 7.5CVE-2021-28810EPSS 1.0%2021-06-08

    If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and …

27. 6.5CVE-2021-20278EPSS 0.8%2021-05-28

    An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying clust…

28. 6.5CVE-2021-31209EPSS 2.6%2021-05-11

    Microsoft Exchange Server Spoofing Vulnerability

29. 6.5CVE-2021-31195ExploitEPSS 74%2021-05-11

    Microsoft Exchange Server Remote Code Execution Vulnerability

30. 7.1CVE-2021-31172EPSS 1.8%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability

31. 7.6CVE-2021-28478EPSS 1.6%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability

32. 4.6CVE-2021-26418EPSS 1.2%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability

33. 6.1CVE-2020-13529EPSS 1.4%2021-05-10

    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FOR…

34. 8.2CVE-2020-36128EPSS 1.2%2021-05-07

    Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (called X-Terminal-Token) to access the marketplace. This allows the store to identify the ter…

35. 9.8CVE-2021-29441ExploitEPSS 83%2021-04-27

    Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet fi…

36. 9.8CVE-2020-22001EPSS 3.4%2021-04-27

    HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution.

37. 6.5CVE-2021-21216EPSS 22%2021-04-26

    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.

38. 6.5CVE-2021-21215EPSS 34%2021-04-26

    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.

39. 7.4CVE-2021-0232EPSS 1.0%2021-04-22

    An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configurat…

40. 4.3CVE-2021-21492EPSS 0.6%2021-04-13

    SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled.

41. 3.7CVE-2021-22890EPSS 3.1%2021-04-01

    curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets a…

42. 6.5CVE-2021-23984EPSS 1.1%2021-03-31

    A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and atte…

43. 6.5CVE-2019-25023EPSS 0.9%2021-02-27

    An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inject wrong IP addresses into these logs.

44. 5.9CVE-2021-21310EPSS 1.7%2021-02-11

    NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction wit…

45. 6.5CVE-2021-21134EPSS 5.0%2021-02-09

    Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.

46. 7.5CVE-2020-17516EPSS 2.0%2021-02-03

    Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or…

47. 3.7CVE-2020-25686EPSS 5.5%2021-01-20

    A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstr…

48. 5.7CVE-2020-27276EPSS 0.5%2021-01-19

    SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchangin…

49. 5.5CVE-2021-1677EPSS 1.2%2021-01-12

    Azure Active Directory Pod Identity Spoofing Vulnerability

50. 9.8CVE-2020-26276EPSS 2.2%2020-12-17

    Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted document. This can result in allowing unv…