Authentication Bypass by Assumed-Immutable Data
CWE-302
The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.
We track 22 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.8.
How this weakness is prevented
- Architecture and Design Operation Implementation: Implement proper protection for immutable data (e.g. environment variable, hidden form fields, etc.)
Latest Authentication Bypass by Assumed-Immutable Data vulnerabilities
- 9.8 Critical severity
Acropolis Operating System (AOS): Authentication Bypass by Spoofing
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the applicat
- 9.9 Critical severity
kcp: Authentication Bypass by Spoofing
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.31.4 and 0.32.2, the kcp front-proxy does not remove inbound X-Remote-User, X-Remote-Group, or X-Remote-Extra-* identity headers before
- 8.1 High severity
Security Verify Access: Authentication Bypass by Assumed-Immutable Data
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted reques
- 8.2 High severity
graphql: Authentication Bypass by Assumed-Immutable Data
@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSoc
- 9.9 Critical severity
postiz-app: Authentication Bypass by Assumed-Immutable Data
Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWT_SECRET, and the auth middleware trusted every claim in that J
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usuario POST parameter overwrites the session-stored user identity via extract($_REQUEST) in DespachoCon
- 9.1 Critical severity
kcp: Authentication Bypass by Assumed-Immutable Data
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by the root shard and has no authentication or authorization in place. This allows
- 7.3 High severity
Easy Config System: Authentication Bypass by Assumed-Immutable Data
An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. An attacker can modify a local database to trigger this vulne
- 9.8 Critical severity
Celoxa504 Firmware: Improper Authentication
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged r
- 8.1 High severity
Brokerage Automation: Authentication Bypass by Assumed-Immutable Data
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication
- 7.5 High severity
RupeeWeb: Authentication Bypass by Assumed-Immutable Data
This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses. Successful expl
- 8.1 High severity
SAP Approuter Node.js package: Authentication Bypass by Assumed-Immutable Data
The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and in
- 9.9 Critical severity
Identity Manager: Authentication Bypass by Assumed-Immutable Data
In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.
- 8.8 High severity
CGFIDO: Authentication Bypass by Assumed-Immutable Data
The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrat
- 9.8 Critical severity
Apache HugeGraph-Server: Authentication Bypass by Assumed-Immutable Data
Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.
- 8.8 High severity
GitLab: Improper Authentication
An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket ac
- 7.5 High severity
Compact DAB Transmitter: Authentication Bypass by Assumed-Immutable Data
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.
- 7.5 High severity
Compact DAB Transmitter: Authentication Bypass by Assumed-Immutable Data
The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.
- 9.8 Critical severity
CAS: Improper Authentication
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fix
- 9.8 Critical severity
SYSGuard 3001: Improper Authentication
Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0.
- 7.5 High severity
Passwordstate: Improper Authentication
A vulnerability classified as critical was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This vulnerability affects unknown code of the component API. The manipulation leads to authentication bypass by assumed-immutable data.
- 8.8 High severity
CENTUM CS 3000: Improper Authentication
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.