cve.bz

CWE-305: Authentication Bypass by Primary Weakness, page 3

Filter

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

What the weakness is: CWE-305 at MITRE. OWASP Top 10: A07:2025 Authentication Failures

Ask an AI about CWE-305

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-305: Authentication Bypass by Primary Weakness and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/305.html and https://cve.bz/cve/cwe/305?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.1CVE-2024-12582EPSS 0.5%

    A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authenticati…

  2. 9.1CVE-2021-26102EPSS 20%

    A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting s…

  3. 8.1CVE-2023-20154EPSS 0.9%

    A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handli…

  4. 8.4CVE-2024-10394EPSS 0.2%

    A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credenti…

  5. 9.0CVE-2024-10082EPSS 0.5%

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root…

  6. 9.8CVE-2024-50478EPSS 1.1%

    Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.

  7. 5.3CVE-2024-9683EPSS 0.3%

    A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall security of password enforcement.  While the…

  8. 7.1CVE-2024-20463EPSS 0.4%

    A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability…

  9. 5.1CVE-2024-8642EPSS 0.4%

    In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass…

  10. 7.5CVE-2024-5957EPSS 0.4%

    This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

  11. 5.3CVE-2024-5956EPSS 0.4%

    This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

  12. 8.8CVE-2024-7557EPSS 1.0%

    A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. H…

  13. 5.4CVE-2024-4784EPSS 0.3%

    An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

  14. 7.3CVE-2024-6637EPSS 0.4%

    The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it…

  15. 6.7CVE-2024-38433EPSS 0.2%

    Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by …

  16. 5.3CVE-2024-39899EPSS 0.6%

    PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance with…

  17. 9.8CVE-2023-41920EPSS 0.4%

    The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.

  18. 7.2CVE-2024-37085KEVEPSS 27%

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blo…

  19. 7.5CVE-2023-4727EPSS 0.7%

    A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP …

  20. 9.8CVE-2024-36388EPSS 0.5%

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

  21. 7.3CVE-2024-34077EPSS 1.2%

    MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an …

  22. 7.5CVE-2024-20378EPSS 0.8%

    A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authent…

  23. 6.1CVE-2024-3847EPSS 0.9%

    Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

  24. 9.8CVE-2023-6153EPSS 0.7%

    Authentication Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE allows Authentication Bypass. This issue affects TeoBASE: through 20240327. NOTE: The vendor was contacted early about this disclosure but did not respond…

  25. 9.8CVE-2024-1202EPSS 0.9%

    Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1.  NOTE: The vendor was contacted and it was learned that the product is not supported.

  26. 9.8CVE-2023-7103EPSS 0.6%

    Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass. This issue affects UFace 5: through 12022024.

  27. 9.8CVE-2024-1403EPSS 3.3%

    In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authenti…

  28. 7.8CVE-2024-20015EPSS 0.10%

    In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch …

  29. 8.8CVE-2024-20674EPSS 17%

    Windows Kerberos Security Feature Bypass Vulnerability

  30. 7.7CVE-2023-6998EPSS 0.2%

    Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

  31. 5.3CVE-2023-4939EPSS 0.6%

    The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a…

  32. 9.8CVE-2023-4501EPSS 0.8%

    User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versio…

  33. 7.5CVE-2023-4898EPSS 0.7%

    Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

  34. 8.8CVE-2023-36497EPSS 0.6%

    Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.

  35. 7.5CVE-2023-2959EPSS 0.6%

    Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users. This issue affects Oliva Expertise EKS: before 1.2.

  36. 9.8CVE-2023-34137EPSS 1.0%

    SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-…

  37. 9.8CVE-2023-34124ExploitEPSS 50%

    The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

  38. 5.9CVE-2023-28126EPSS 67%

    An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

  39. 6.5CVE-2022-40723EPSS 0.5%

    The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

  40. 9.8CVE-2023-1833EPSS 0.8%

    Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass. This issue affects Redline Router: before 7.17.

  41. 8.8CVE-2023-28727EPSS 0.4%

    Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.

  42. 5.5CVE-2023-27538EPSS 1.5%

    An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool …

  43. 5.9CVE-2023-27536EPSS 1.8%

    An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DEL…

  44. 5.9CVE-2023-27535EPSS 1.8%

    An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool f…

  45. 9.8CVE-2023-27582EPSS 1.0%

    maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a full authentication bypass if SASL authorization username is specified when using the PLAIN authentication mechanisms. In…

  46. 9.8CVE-2023-1307EPSS 1.1%

    Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.

  47. 9.8CVE-2023-0777ExploitEPSS 15%

    Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.

  48. 5.9CVE-2022-3100EPSS 0.4%

    A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

  49. 7.2CVE-2022-4722EPSS 1.2%

    Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

  50. 7.8CVE-2022-39245EPSS 0.2%

    Mist is the command-line interface for the makedeb Package Repository. Prior to version 0.9.5, a user-provided `sudo` binary via the `PATH` variable can allow a local user to run arbitrary commands on the user's system with root permission…